Abzal Aitoriyev

I investigate adversary behavior at Group-IB, mapping ransomware, phishing, and scam operations to MITRE ATT&CK and the Cyber Kill Chain, then turning that into clear technical reports for both business and technical stakeholders. I also build Python automation tooling for threat-intel workflows, including a custom leak-data extraction pipeline.

On the offensive side, I practice across web, API, and network targets through 90+ TryHackMe rooms, 50+ Root-Me challenges, and ongoing PortSwigger Web Security Academy labs. I apply OWASP Top 10 testing methods, write structured write-ups, and I’ve published a Python proof-of-concept for a MongoDB denial-of-service vulnerability.