Mustafa Habib

Ethical Hacker

Penetration Tester

Offensive Security Enthusiast

Mustafa Habib
Mustafa Habib
Mustafa Habib
Mustafa Habib
Mustafa Habib

Ethical Hacker

Penetration Tester

Offensive Security Enthusiast

About Me

I am a cybersecurity practitioner focused on Penetration Testing and Cybersecurity, with hands-on experience across offensive security, vulnerability assessment, reconnaissance, and security reporting.

My penetration testing work includes network and web application testing, Active Directory security, Windows/Linux exploitation, privilege escalation, post-exploitation, vulnerability validation, and attack-path analysis. I have worked with tools and techniques including Nmap, Nessus, Burp Suite, Metasploit, Wireshark, BloodHound, Responder, mitm6, Mimikatz, Impacket, Kerberoasting, SMB relay, credential attacks, and related offensive security methodologies.

My OSINT experience includes open-source intelligence gathering, online research, source validation, digital footprint analysis, reconnaissance, information correlation, and structured intelligence reporting. I focus on identifying relevant information, validating sources, connecting technical findings, and presenting results clearly and professionally.

I hold the Practical Network Penetration Tester (PNPT), Practical OSINT Research Professional (PORP), Practical Junior Penetration Tester (PJPT), and CompTIA A+ certifications.

My approach to cybersecurity is based on understanding how attacks work, validating findings beyond automated tools, identifying root causes and attack paths, assessing security impact, and translating technical results into clear, actionable reports and remediation recommendations.

I continue to develop my expertise through hands-on labs, security research, practical certifications, technical projects, and real-world cybersecurity work, with a long-term focus on penetration testing, offensive security, OSINT, and threat intelligence.

My Awards
Academic Excellence Award x2
Academic Excellence Award x2
ICPC Ranked
Best Student of the year
Pricing
Popular
$ 29 hour
  • Penetration Testing
  • Application Security Assessment
  • ICS Securityno include
  • IoT Security Assessment
  • Risk managementno include
Premium
$ 59 hour
  • Penetration Testing
  • Application Security Assessment
  • ICS Securityincluded
  • IoT Security Assessment
  • Risk managementincluded
My Services
Application Security

Fundamental role is to troubleshoot concerns that include company organisation and implemented strategies.

Payment Systems Security

Provide security applications of information and payments for the company, business development of the organisation.

Strategy Consultation

The market for strategy consulting services consists disciplines: Corporate Strategy, Economic Policy, Mergers.

IoT Security Assessment

Our experts provide IoT security capability to the wider ecosystem. Validate virtually any connected device of attacks.

Clients
Testimonials
Fun Facts
3x Academic Excellence Awards Winner
10,000+ Books Pages Read
1 000+ Days of Weight Lifting
1 000+ Cups Of Black Tea
Resume
Education
2022 - 2026
Bachelor of Information Technology
Kardan Univeristy,
Kabul, Afghanistan

Built a strong foundation in software development, database systems, computer networks, operating systems, systems administration, and information security. Strengthened technical, analytical, and problem-solving skills through the design, implementation, and management of IT systems, establishing a solid academic foundation for advanced study in cybersecurity.

2010 - 2021
Primary and Secondary Education
Khana e Noor No 3 High School,
Kabul, Afghanistan

Demonstrated consistent academic excellence throughout twelve years of education, earning numerous A grades across a broad range of subjects and thriving in a highly competitive academic environment. Developed an early and lasting interest in technology while building strong communication, public-speaking, leadership, and teamwork skills. Actively participated in numerous academic programs, school events, and extracurricular activities, earning awards and recognition in multiple competitions and regularly taking on responsibilities that required initiative, confidence, discipline, and collaboration.

Experience
Penetration Tester
2025 - 2026
Penetration Tester
ShafafHub

Conducted internal network penetration tests involving host discovery, port scanning, service enumeration, vulnerability identification, exploitation, and post-exploitation across Windows and Linux environments.
Performed network reconnaissance and service enumeration using Nmap and other security tools, assessing HTTP/HTTPS, SMB, SSH, FTP, and other exposed services.
Conducted vulnerability assessments using Nessus, analyzed scan results, manually validated findings to reduce false positives, assessed security impact, and documented remediation recommendations.
Assessed Active Directory environments through domain enumeration, user/group discovery, privilege relationship analysis, and identification of security misconfigurations and attack paths.
Tested Active Directory attack techniques including LLMNR/NBT-NS poisoning, SMB relay, IPv6/DNS takeover with mitm6, Kerberoasting, pass-the-hash/pass-the-password, credential dumping, and NTDS.dit extraction.
Performed privilege escalation, lateral movement, credential attacks, pivoting, file transfers, and post-compromise enumeration using tools including BloodHound, Responder, Mimikatz, Metasploit, and Impacket.
Performed web application penetration testing covering reconnaissance, subdomain enumeration, SQL injection, XSS, command injection, insecure file upload, and common web security weaknesses.
Produced professional penetration testing reports containing technical evidence, vulnerability impact, attack paths, severity analysis, remediation recommendations, and mitigation guidance.

My Awards
Academic Excellence Award x3

Spring 2026

Awarded for academic excellence and consistent high performance during the Spring 2026 semester.

- Kardan University

Academic Excellence Award x2

Fall 2025

Awarded for academic excellence and consistent high performance during the Fall 2025 semester.

- Kardan University

Academic Excellence Award x1

- Fall 2023 -

Awarded for academic excellence and consistent high performance during the Fall 2023 semester.

- Kardan University

ICPC Ranked

- 2025 -

Competed in the International Collegiate Programming Contest, showcasing strong problem-solving and algorithmic skills

- ICPC - Kabul, Afghanistan

Best Student of the year

- 2019 - 

Awarded for academic performance, leadership, and contribution to student activities.

- Khana e Noor No 3 High School

Certifications
Certificates
October 20, 2026
PNPT
TCM Security

Practical Network Penetration Tester

verify here
September 23, 2026
PORP
TCM Security

Practical OSINT Research Professional

verify here
September 09, 2026
PJPT
TCM Security

Practical Junior Penetration Tester Certification

verify here
August 07, 2025 - August 07, 2028
CompTIA A+ CE
ComptTIA

CompTIA A+ Continuing Education Certification

verify here
Skills
Overall
  • OSINT (Open Source Intelligence)
  • Network Penetration Testing
  • Web Penetration Testing
  • Exploit Development
Languages
  • English
  • Persian / Dari
Checklist
  • Penetration Skills
    90%
  • Collaboration
    75%
  • Adaptability
    85%
  • Critical Thinking
    95%
Knowledge
  • Creative thinking
  • Problem-solving
  • Practical thinking
  • Professional Teamwork
  • Excellent decision-making
  • Communication
  • Adaptability
  • Discipline Driven Workflow
Blog
May 31, 2026 CIANA Pentagon in Cybersecurity: Confidentiality, Integrity, Availability, Non-Repudiation, and Authentication

CIANA is a cybersecurity trust model that expands the CIA Triad into five practical pillars: confidentiality, integrity, availability, non-repudiation, and authentication. This guide explains the model, its controls, real-world examples, penetration-testing impact, incident-response use, and standards-based references.

Get in Touch
  • Address: Earth
  • Email: MustafaHabibX@proton.me
Contact Form