• Getting Started in Web Penetration Testing

  How I approach my first black-box tests, from recon to reporting.
• Lessons from CTF Challenges

  What continuous CTF solving taught me about real-world security.
• Applying OWASP Top 10 in the Lab

  How I practice each OWASP category in isolated environments.

• Jul 2026 - Aug 2026
  ANCS - tunCERT
  Web Penetration Tester Intern
  • Gouvernorat Tunis, Tunisie · Hybrid
  • Black-box penetration testing on target web application.
  • Deployed and isolated the target VM in Host-Only networking.
  • Worked with tools such as Kali Linux, Nmap, Nikto, OWASP ZAP, Burp Suite and SQLmap.
  • Applied PTES and OWASP methodologies in an isolated lab environment.
  • Identified and analyzed the target application vulnerabilities, then documented findings with CVSS scoring.
  • Discovered and exploited critical security flaws including SQL injection in database-driven applications and local privilege escalation on Linux systems.
  • Learned to transition from technical exploitation to formal, professional security documentation and risk communication.
  • Wrote a technical audit report with risk classification and remediation recommendations.

• Web Pentest Lab

  Isolated lab environment for practicing manual and automated web penetration tests.
• CTF Writeups

  Collection of write-ups from web, Linux, and network CTF challenges.
• Network Scanner

  Python and Bash tooling for host discovery and service enumeration.

Let's Connect

• github /
• linkedin /
• ahmed.b.mim@gmail.com