Masoud Eslahy
OFFENSIVE SECURITYSoftware engineer and cybersecurity MSc student, learning how attackers find weaknesses in applications and networks.
KALI / OFFENSIVE TOOLING
SELECTED WORK
A selection of systems I’ve built, and the
security questions they led me to.
THE BUILD
Built a cybersecurity knowledge base with a Kali Linux tool index, learning resources and protocol diagrams for OAuth, TLS, NTLM and Kerberos.
SECURITY CONTEXT
Authentication and protocol study through OAuth, TLS, NTLM, and Kerberos diagrams.
THE BUILD
Built an AI fitness app with movement feedback and training plans; explored input-validation, SQL-injection and brute-force risks through guided testing.
SECURITY CONTEXT
Guided testing explored input validation, SQL injection, and brute-force risks.
THE BUILD
Built an app studio with separate client deployments, magic-link/OTP authentication and a Turso database.
SECURITY CONTEXT
Magic-link and OTP authentication, with separate deployments for individual clients.
Wraith selected.
ABOUT ME
Masoud EslahyVienna, Austria
My foundation is in software engineering: building full-stack applications, developing websites for local businesses, and working in IT support. That experience gives me a practical starting point for understanding how applications and networks work.
Offensive security is the direction I want to pursue long term. I’m studying Cyber Security and Resilience at USTP in St. Pölten and shaping my own study path alongside university.
Background on LinkedInPERSONAL STUDY PATH
My independent study plan alongside university. Building depth, one stage at a time.
Build a foundation in enumeration, privilege escalation, Active Directory, and clear technical reporting.
Study defended networks, evasion, lateral movement, and the reasoning behind complete attack chains.
Read unfamiliar source code, trace application logic, and understand how web vulnerabilities connect.
Explore Windows internals, reverse engineering, memory corruption, and reliable exploit development.
OSWAWEB-200
Optional web foundationOSEEEXP-401
Further exploit developmentEDUCATION
September 2026 - Present
USTP - University of Applied Sciences St. Pölten
First semester. Expected completion: 2028.
2015 - 2019
Pishtazan University
CAPABILITIES
The technologies I build with, the systems I’ve supported, and the security skills I’m developing.
DEVELOPING THROUGH STUDY & PRACTICE
My focus is offensive security: understanding how applications and networks behave, then testing those assumptions in a personal lab.
FROM MY BACKGROUND
Hands-on work across different tools in a personal Kali Linux lab, alongside independent study and my cybersecurity MSc.
CONTACT
Security, software, or a good problem to work through. I’m open to a thoughtful conversation.
M.Eslahy@yahoo.comVienna, Austria