Skip to content
View M-MDI's full-sized avatar
💭
Just typing Golang here and there, one function at a time
💭
Just typing Golang here and there, one function at a time
101 followers · 327 following
  • 23:17 (UTC +01:00)

Highlights

  • Pro

Block or report M-MDI

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
M-MDI/README.md


⚡ At a Glance

⚡ Quick Profile:
  💼 Role: Full-Stack Engineer
  🔐 Specialty: Security Researcher
  🤖 Focus: AI Systems Builder
  📍 Base: Oujda, Morocco 🇲🇦
  🌍 Availability: Remote Worldwide
  ☕ Core: Go • Java • Spring Boot • React • AI

🧭 Currently Building

🧠 CoachMind AI Platform
🔐 Offensive Security Labs
☁️ AWS Serverless Architecture
🤖 Local AI Ecosystem
📚 Algorithms & System Design

 

whoami:
  name: Mehdi Moulabbi
  base: Oujda, Morocco 🇲🇦
  trained_at: Zone01 Oujda (42 network — peer-learning, no lectures, no excuses)
  experience: ~3 years shipping real products, freelance + solo builds
  status: open to full-stack / SDET roles — Morocco · Canada · France · Remote EU
  known_for:
    - 1st place, Afric Art Tech Hackathon (AI & Culture)
    - Found + patched a high-severity stored XSS in a live blog platform
    - Builds AI systems locally instead of renting them from an API
  currently_learning:
    - AWS Serverless (Lambda, API Gateway, DynamoDB)
    - Advanced OWASP + Burp Suite for offensive security
  philosophy: "Great software is built twice: first in the mind, then in code."

🧬 TECH MATRIX


Languages

Backend

REST gRPC

Frontend

Database

DevOps

AI / Automation
Ollama LangChain n8n
ChromaDB Whisper CUDA
Claude API RAG Pipelines

Security
Burp Suite Nmap
Wireshark Metasploit
Kali Linux OWASP

🏗 ENGINEERING ARCHITECTURE


flowchart LR
    A[Client] --> B[API Gateway]
    B --> C[Auth Service]
    B --> D[Core Service]
    B --> E[AI Service]
    C --> F[(Database)]
    D --> F
    D --> G[(Cache)]
    E --> H[(Vector DB)]
    E --> I[LLM Models]
    D --> J[Message Queue]
    J --> K[Event Processors]
Loading

Core Principles
✔ Microservices Architecture
✔ Clean Architecture
✔ Hexagonal Architecture
✔ REST & gRPC APIs
✔ Event-driven Systems
✔ CI/CD Pipelines
✔ Docker Containerization

Security & AI
✔ JWT & OAuth 2.0
✔ RAG Pipelines
✔ Prompt Engineering
✔ Security Testing
✔ OWASP Top 10
✔ Threat Modeling
✔ Zero Trust Design

🛡 SECURITY ARSENAL


Offensive Tools
Burp Suite Pro Nmap
Wireshark Metasploit
Kali Linux SQLMap

Web Vulnerabilities
XSS (Stored/Reflected)
SQL Injection CSRF
SSRF IDOR
Broken Auth Mass Assignment

Methodology
OWASP Top 10 OWASP ASVS
Threat Modeling
Penetration Testing
Security Code Review
Incident Response

🛰️ ACTIVE BUILDS


⚽ CoachMind AI
Football Intelligence Platform

Go React Postgres AI

• Tactical analytics engine
• RAG-powered scouting assistant
• Real-time match insights
• Scalable microservices arch

GitHub · Demo

🔐 01Blog Security Audit
Full Pentest Report

Spring Angular OWASP

• 120+ test cases executed
• High-severity stored XSS caught
• Complete patch documentation
• OWASP methodology applied

GitHub · Report

🛟 Still Here
Safety-Monitoring Platform

React Native Go Postgres

• Offline-detection architecture
• AI companion named Vera
• Real-time safety alerts
• Cross-platform mobile

GitHub · Demo

🧠 Neumann
Local AI Desktop Assistant

Python Electron CUDA

• Fully local — no cloud dependency
• Voice interface + memory
• Multi-LLM routing engine
• Self-improvement loop

GitHub · Demo

🌐 Joumlaty
Services Marketplace

Java Spring React MySQL

• Service provider matching
• Payment integration
• Rating & review system
• Geolocation search

GitHub · Demo

💬 Social Network
Full-Stack Social Platform

TypeScript Node.js MongoDB Redis

• Real-time messaging
• Feed algorithm
• Media uploads
• Notification system

GitHub · Demo

📅 JOURNEY


timeline
    title Career Timeline
    2023 : Started Freelancing — first real products shipped
    2024 : Joined Zone01 Oujda (42 Network)
    2024 : 🏆 1st Place — Afric Art Tech Hackathon (AI & Culture)
    2025 : Security Research — found & patched critical XSS
    2025 : AI Systems — building local-first AI tooling
    Now : Open to Full-Stack / AI / Security Roles
Loading

📡 GITHUB SIGNAL







🏆 TROPHY CASE




📜 Certifications

✔ Zone01 Oujda (42 Network)
✔ AWS (Currently Learning)
✔ Burp Suite Academy
✔ TryHackMe
✔ Hack The Box

🌍 Languages

🇬🇧 English — Fluent
🇫🇷 French — Fluent
🇲🇦 Arabic — Native
🇪🇸 Spanish — Learning

🎯 Looking For

Remote Full-Stack Engineer
Backend Engineer (Go/Java)
AI Engineer
SDET
Security Engineer

📈 CONTRIBUTION FLOW


snake animation

⚠️ requires a one-time GitHub Action setup — see platane/snk



🤝 Let's Build Something




"Great software is built twice: first in the mind, then in code."

Followers Stars


Pinned Loading

  1. ilUminara ilUminara Public

    JavaScript

  2. lem-in lem-in Public

    Go 1

  3. Net-Cat Net-Cat Public

    Go

  4. Arkanoid-Game Arkanoid-Game Public

    JavaScript