AboutExperienceClients SecurityPlatformsSkills ResumeContact
🟢 Available for QA · Security · Dev contracts

Abdul Moiz QA Engineer · Security Researcher · Developer

5+ years breaking, building, and securing digital products — from critical OAuth vulnerabilities on HackerOne to Elite bug reporting on TesterWork, eSIM beta testing, and full-stack web development. Based in Riyadh, SA.

670+
Bugs reported
350+
Perfect bugs
84+
UserTesting sessions
8+
Bug bounty programs
5yr
IT & security exp.
350+
Jarir/Lefties bugs
140+
Carry1st approved
50%
Bug acceptance rate
84+
UserTesting sessions
12+
Platforms mastered
Who I am

Founder of JASK Digital.
Riyadh-based QA & Security specialist.

I'm a Quality Assurance professional and Full Stack Developer with over five years of hands-on experience testing websites, mobile apps, SaaS platforms, gaming titles, eSIM products, fitness tech, electronic gadgets, food & beverage platforms, and enterprise software. I specialize in end-to-end QA — ensuring every product I touch functions flawlessly and delivers an exceptional user experience.

My security research spans HackerOne (blackninja_224), Bugcrowd, and several private VDPs. I've uncovered high and critical severity vulnerabilities including an OAuth authentication bypass at WisdomTree (reported to Michael Myers, VP), a Marketo Munchkin subdomain takeover on Amazon, race conditions at Crypto.com, and a McAfee supply-chain phishing issue. Every report is within scope, reproducible, and documented to enterprise standard.

Alongside security, I'm an Elite Bug Reporter on TesterWork, a Gold Tester on uTest (DAZN, Spotify, Idemia, Amazon Local Payment), and have completed 84+ moderated and unmoderated usability sessions on UserTesting for clients including Dior, Expedia, Cisco, Noon, and Amazon.

I develop clean, responsive, high-performing websites — portfolio sites, e-commerce stores, historic-record databases — combining React/Node.js with AI-assisted workflows. My work was recognized with a Certificate of Honour from Pakistan International School Riyadh in the Portfolio Website category.

🏆 HackerOne: blackninja_224 Fiverr Pro Seller Upwork Top Rated uTest Gold Tester TesterWork Elite LinkedIn Top Voice UserTesting Expert Carry1st Tester Game QA Specialist
AM
Abdul Moiz
Senior QA Engineer · Security Researcher · Full Stack Developer
🟢 Available 📍 Riyadh, SA 🌍 Remote OK
🎓
Certificate of Honour
Pakistan International School Riyadh
VIEW
💻
Coding Week Certificate
School programming award
UPLOAD
🛡️
HackerOne Researcher
blackninja_224 · Level 4
H1
Work history

What I've shipped

Five years across enterprise QA, game testing, eSIM validation, bug bounty, and full-stack development.

2022 — Present
Holafly
Beta Testing
eSIM Beta Tester
End-to-end beta testing of Holafly eSIM activation flows on iOS and Android across multiple countries. Reported activation failures, network-profile switching bugs, QR code scan errors, and UI regressions.
Identified critical activation flow bug
eSIMiOSAndroid
2022 — Present
King of Meat / Football Pro Stars
GameTester
Game QA Tester
Crush bug identification on King of Meat — detected multiple gameplay-breaking glitches. Contributed to Football Pro Stars playtesting on Playtestcloud, focusing on physics engine accuracy and cross-platform parity.
Crush bug approved — critical gameplay glitches resolved
Game TestingPlaytestcloud
2021 — Present
Jarir · Lefties · Carry1st
TesterWork
Elite Bug Reporter — 350+ Accepted Bugs
Achieved Elite Tester status with 350+ perfect approved bugs across Jarir Bookstore, Lefties, and Carry1st iOS/Android apps. Specialised in exploratory testing, payment flow validation, Arabic RTL, and checkout regressions.
350+ perfect bugs · Elite Tester tier
TesterWorkiOSAndroid
2021 — 2022
Cisco Systems
UserTesting
IT Operations Specialist — Moderated QA
Conducted moderated live usability sessions with Cisco managers evaluating Webex enterprise dashboard. Identified critical UI bottlenecks and functionality issues affecting global remote teams.
↓ 40% reduction in regression testing time
Moderated SessionsWebex
2021 — Present
UserTesting
84+ Sessions
Expert Tester — 84+ Completed Sessions
Completed 84+ paid usability test sessions across Dior luxury e-commerce, Expedia travel booking, Cisco enterprise dashboard, Noon marketplace, Amazon, energy drink brands, fitness gadget sites, and food delivery platforms.
DiorExpediaNoonAmazon
2021 — Present
uTest
Gold Tester
Gold Tester — DAZN · Spotify · Idemia · Amazon
Achieved Gold Tester status on uTest. For DAZN (Ismail Akkan): 200+ critical playback, buffering, and UI issues. For Spotify: best-in-class test cases. For Idemia (Kristina): biometric identity verification. For Amazon Local Payment: payment flow regression.
Gold Tester · 200+ DAZN bugs
DAZNSpotifyIdemia
2022 — Present
JASK Digital
Founder
Founder & Lead Developer — Full Stack Agency
Founded JASK Digital — a full-stack web development agency delivering portfolio websites, e-commerce stores, and exhibition management platforms. Led a 5-person dev team. Active on Fiverr Pro (150+ projects, Top Rated) and Upwork (Top Rated).
↓ 30% delivery time · 150+ Fiverr projects
ReactNode.jsWordPress
Client portfolio

Named clients & real impact

DAZN
Ismail Akkan
UI/UX Bug Reporting
200+ critical streaming bugs on Xbox One S for Riyadh Season boxing events.
↑ +25% engagement post-fix
Lenskart
Senior Engineer
Website UX Consulting
Product filter, checkout flow, virtual try-on validation.
↑ Conversion uplift
Idemia
Kristina
Biometric Testing
Facial recognition, document OCR, liveness detection across Android/iOS.
Critical biometric edge cases resolved
WisdomTree
Michael Myers (VP)
Security Research
High-severity OAuth authentication bypass → full account takeover.
🔴 HIGH severity · ATO resolved
Saudi Airlines · Saddad
Payment Gateway
App Tester
Critical payment gateway vulnerability causing transaction failures.
↑ +18% conversion
Spotify
uTest Gold
Best-in-class Test Cases
Playlist management, offline sync, cross-device handoff, Premium features.
Gold Tester · Zero rejected
Bug Bounty & Vulnerability Research

Security research

🛡️ HackerOne: blackninja_224 🐛 Bugcrowd: blackninja_224
HIGH
OAuth Authentication Bypass → ATO
WisdomTree Prime · Michael Myers
OAuth redirect parameter manipulation allowing full account takeover. Resolved.
✓ RESOLVED
MEDIUM
Subdomain Takeover — Amazon Payment
Amazon Local Payment Service
Dangling CNAME on pages.amazonpaymentservices.com → phishing risk.
✓ RESOLVED
MEDIUM
Munchkin API Identity Spoofing
Amazon · 790-XRI-088
Unauthenticated lead association via email param, enabling identity spoofing.
✓ RESOLVED
MEDIUM
McAfee Phishing / Supply Chain
Crypto.com VDP
Broken link to unclaimed McAfee domain → phishing vector.
→ SUBMITTED
LOW
GraphQL DoS — odin.salfinc.com
Self Financial
GraphQL endpoint crashes on application/json Content-Type.
→ SUBMITTED
LOW
Munchkin Lead Association
Moveworks (Private)
Unauthenticated lead association via Marketo Munchkin API.
→ SUBMITTED
Testing ecosystem

Platforms I've mastered

👥
UserTesting
84+ sessions
🔍
uTest
Gold Tester
⚙️
TesterWork
350+ bugs · Elite
🐦
Testbirds
Crowd testing
🧪
TestIO
Functional
💬
Respondent.io
Research
🎮
GameTester
Game QA
🧠
UserBrain
UX testing
📊
Userlytics
UX research
☁️
Playtestcloud
Game beta
🛡️
HackerOne
blackninja_224
🐛
Bugcrowd
Bug bounty
Capabilities

My skill matrix

💻Web Development
ReactNode.jsMongoDBWordPressREST APIsGit
🧪Quality Assurance
FunctionalRegressionUI/UXAPIPostmanJIRAExploratory
🛡️Security Testing
XSSCSRFOAuthSubdomain TKOGraphQL DoSBurp Suite
🤖AI Tools
ChatGPTDeepseekCopilotPerplexityFirefly
🎨Design
FigmaAdobe XDCanvaPhotoshop
⚙️Dev Ops & PM
GitLab CI/CDAgileScrumJIRATrello
Hardware lab

Testing devices

🎮 Xbox One S / Series X
🤖 Android 9–14
🍎 iOS Devices
📱 Tablets
📺 Smart TVs
🪟 Windows 10/11
📡 Mi Stick
🖥️ Desktop PCs
🎮 Gaming Consoles
⌚ Wearables
Social proof

What clients say

"
Abdul's attention to detail in testing our payment gateway was exceptional. He identified critical Saddad integration issues that our internal team had missed entirely.
AS
Ahmed Al-Saud
Saudi Airlines · Payment Lead
"
The DAZN streaming QA for our Riyadh Season coverage was thorough and fast. Abdul identified buffering patterns and UI regressions on Xbox One S that we hadn't caught internally.
IA
Ismail Akkan
DAZN · Product Team
"
Working with Abdul on our UI testing was a game-changer. His comprehensive reports and actionable insights helped us significantly improve our platform's usability.
MC
Michael Chen
Product Manager
Credentials

Resume & qualifications

💼 Work Experience
Elite Bug Reporter
TesterWork · Jarir/Lefties/Carry1st
2021 — Present
350+ perfect bugs. Elite Tester tier.
Gold Tester
uTest · DAZN, Spotify, Idemia
2021 — Present
200+ DAZN bugs. Best-in-class test cases.
Expert Test Reviewer
UserTesting · 84+ sessions
2021 — Present
Dior, Expedia, Cisco, Noon, Amazon.
Founder & Lead Developer
JASK Digital
2022 — Present
Full-stack agency. 150+ Fiverr projects. Top Rated.
🛡️ Security Research
OAuth ATO · High Severity
WisdomTree · Michael Myers
HackerOne · Resolved
OAuth redirect bypass → full account takeover.
Subdomain Takeover + Munchkin API
Amazon VRP
HackerOne · Resolved
Dangling CNAME + identity spoofing.
McAfee Phishing / Supply Chain
Crypto.com VDP
Medium · Submitted
Broken link → unclaimed McAfee domain.
GraphQL DoS + Munchkin Lead
Self Financial / Moveworks
Low · Private VDP
GraphQL crash · Unauthenticated lead association.
🎓 Education
Certificate of Honour
Pakistan International School Riyadh
Portfolio Website category.
Coding Week Certificate
Pakistan International School Riyadh
Programming & web development award.
Get in touch

Let's work together

AM
Abdul's AI
Online
Hey! 👋 I'm Abdul's assistant. Ask me about bug bounty finds, client work, skills, or anything else.
🛡️ Bug Bounty🔴 WisdomTree📦 Amazon🎥 DAZN📚 Jarir👥 UserTesting📡 eSIM⚙️ Skills📞 Contact