A curious mind.
An offensive
perspective.

I'm MOYIN, a Penetration Tester and Security Researcher. You can also call me OxShaD.

I focus on web application and API security, especially broken access control, IDOR, and sensitive data exposure. I look at how an application handles requests and whether users can reach records or actions they should not have access to.

I use Burp Suite to inspect and modify HTTP traffic, and document my findings in Notion. I also build with Python: my Subenum project brings subdomain discovery, DNS checks, and HTTP probing into a single reconnaissance workflow.

My published research covers student profile and transcript exposure. Alongside testing, I build security labs and study tools, and share the findings and lessons here.

Follow the thinking ↗