present day · present time · Dalian, China

Achraf Ouazzani Chahidi

Web Security Specialist · eJPT certified

Break it to understand how to defend it.

Resume GitHub Email

01 / About

Web security specialist and cybersecurity student from Morocco, currently studying at Dalian Polytechnic University. I focus on offensive security — penetration testing, web application security, vulnerability research, and CTF. I play with the Moroccan team Akasec and build security tooling and full-stack web apps on the side.

  • From Morocco 🇲🇦 · based in Dalian 🇨🇳
  • Dalian Polytechnic University
  • eJPTv2 certified
  • CTF player @ Akasec

02 / Skills

Offensive Security

  • Penetration Testing
  • Web App Security (OWASP)
  • Vulnerability Research
  • Exploit Dev
  • CTF

Tooling & Recon

  • Burp Suite
  • nmap
  • sqlmap
  • ProjectDiscovery
  • CVE research

Languages

  • Python
  • C
  • Bash
  • TypeScript
  • JavaScript

Backend

  • Flask
  • FastAPI
  • SQLAlchemy
  • JWT
  • SQLite / MSSQL
  • Redis

Frontend

  • Astro
  • React
  • Svelte
  • Tailwind CSS
  • Vite

DevOps

  • Docker
  • nginx
  • GitHub Actions
  • Cloudflare
  • Vercel

03 / Projects

packguard

Supply-chain malware scanner

Scans npm & PyPI packages for malicious code using local AI (Ollama), static analysis, and typosquatting detection — fully offline, no cloud.

  • Python
  • Ollama
  • Static Analysis
  • Security
Code

CTF-Archive

private

Self-hostable CTF platform

Flask web app for browsing archived CTF challenges, tracking events, writing writeups, and managing progress — with search, social messaging, bookmarks, and solves.

  • Flask
  • SQLAlchemy
  • JWT
  • SocketIO
  • Redis

checker-CVE-2024-6387

regreSSHion scanner

Concurrent scanner that checks hosts for the OpenSSH regreSSHion vulnerability (CVE-2024-6387). Supports IPs, domains, and CIDR ranges with version exclusion.

  • Python
  • CVE
  • Threading
Code

Daily Chinese

private

HSK Mandarin-learning PWA

Full-stack PWA with spaced-repetition (FSRS), grammar notes, mock exams, an AI tutor, and a leaderboard. React + FastAPI, containerized.

  • React
  • FastAPI
  • TypeScript
  • PWA
  • Docker

Gemi-Bot

private

AI Discord bot

Gemini-powered Discord bot that manages servers, channels, and members through natural-language commands.

  • Python
  • discord.py
  • Gemini

blog.achux.xyz

Security & CTF writeups

My blog of security research and CTF writeups — HackTheBox, TryHackMe, Root-Me, and competition challenges.

  • Astro
  • Svelte
  • Tailwind
Code Live

04 / CTF & Achievements

13+
Writeups published
3
1st-place wins
20+
CTF events played

Placements

  • 🥇 1st place — MCSCv12 · IDEHv6 · AISEC CTF (2025)
  • 🥈 2nd place — Cyber Odyssey (2024)
  • • Top 15 — HTB Cyber Apocalypse (Team L3ak)

Teams

  • Akasec
  • L3ak

Profiles

05 / Contact

Let’s build or break something.

21@achux21.com