About

About

Hi, I'm Ahmad Alawneh!

Penetration Tester based in Amman, Jordan. I graduated from Princess Sumaya University for Technology with a B.Sc. in Cyber Security. Currently working at NourNet doing what I enjoy most: breaking into things and writing about it.

I do web application, network, and Active Directory penetration testing. Lately I’ve been getting into cloud security and AI. When I’m not on an engagement, I’m usually building tools, playing CTFs, or writing up something on this blog.


HackTheBox Badge

Certifications

  • OSCP+ (OffSec)
  • CRTE (Altered Security)
  • OSWP (OffSec)
  • eWPTXv3 (INE Security)
  • eJPTv2 (INE Security)
  • Practical Web Hacking (TCM Security)
  • Practical Bug Bounty (TCM Security)
  • Practical API Hacking (TCM Security)
  • AWS Academy Cloud Security Foundations
  • AWS Academy Cloud Foundations

Work History

  • Penetration Testing Engineer at NourNet
    • Jul 2025 - Present
  • Technical Lead at Cyber Security Club, PSUT
    • Sep 2024 - Sep 2025
  • Penetration Testing Intern at Cryptika
    • Jan 2024 - Aug 2024
  • Instructor at Cyber Security Club, PSUT
    • Mar 2021 - Jun 2024

Projects

  • PFTP - Multi-protocol file transfer hub for pentesters. Serves tools over HTTP, FTP, and SMB simultaneously with a web UI, upload/exfil support, and live activity logs.

  • PTNG (Penetration Testing New Generation) - Collaborative pentesting platform built with Python Flask, React, and AWS. Pre-configured VMs, real-time team collaboration, and AI-powered vulnerability analysis.

  • CTFtunnel - OpenVPN management tool for CTF competitions. Dual subnet architecture, automated certificate management, static IP assignment for challenge machines, and an interactive CLI for distributed teams.

CTF Achievements

Challenge Writer

  • METACTF 2025
  • ArmyThon 2025
  • PwnSec CTF 2024

Competitions

  • HTB University CTF 2023 - 1st in Jordan, 2nd in the Arab world, 29th globally
  • Arab Security Cyber Wargames 2025 - 4th place
  • Elite Agents Conference - 1st place (Penetration Testing Competition)
  • JUSTCTF 2024 - 10th place
  • METACTF 2024 - 4th place
  • MachinesCTF 2023 - 2nd place
  • PlaygroundsCTF 2023 - 4th place

Skills

  • Security Testing: Active Directory exploitation, web application testing, network penetration testing, wireless security, OWASP methodology
  • Tools: impacket, netexec, bloodyAD, certipy, Burp Suite, nmap, BloodHound
  • Programming: Python, Bash, JavaScript, SQL
  • Infrastructure: Linux, Docker, AWS