Mobile Security Researcher | Penetration Tester | Bug Bounty Hunter | 2+ Years Experience
first conversation is free, sign up to message muhammad
Android and ios apps security audit, penetration testing and vulnerability assessment.
I am a results-driven Mobile Security Researcher and Penetration Tester with over 2 years of dedicated experience in securing mobile applications. My expertise lies in conducting comprehensive static and dynamic analysis for both Android and iOS platforms, allowing me to identify and remediate critical vulnerabilities. I have a proven track record of discovering over 200 vulnerabilities across high-profile applications, including Botim, Noon, and Talabat, addressing issues such as hardcoded credentials, insecure data storage, WebView exploitation, and SDK-level flaws. As an active bug bounty hunter, I regularly submit detailed vulnerability reports to platforms like Apple, Google, HackerOne, and YesWeHack. My proficiency covers the full spectrum of mobile pentesting workflows, deep knowledge of the OWASP Mobile Top 10, and advanced binary analysis of iOS kernelcache and Android APKs. I am skilled in using a wide array of tools including Frida, Burp Suite Pro, MobSF, Ghidra, and leverage Python for scripting and automation. I am passionate about uncovering security weaknesses and contributing to a more secure mobile ecosystem.