39-day longest streak
> Offensive Security Researcher operating at the intersection of web, API, network, and cloud security. I break systems before the bad guys do methodically, ethically, and relentlessly. > > Currentlyβ¦
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β β
β βββββββ βββ βββ βββ ββββββ ββββ ββββ β
β βββββββββββ βββ ββββββββββββββββ βββββ β
β βββββββββββ βββββββββββββββββββββββββββ β
β βββββββββββ βββββββββββββββββββββββββββ β
β βββ ββββββββββββββ ββββββ ββββββ βββ βββ β
β βββ ββββββββββββββ ββββββ ββββββ βββ β
β β
β R I Z V I β O F F E N S I V E β
β S E C U R I T Y R E S E A R C H E R β
β β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ





βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β WHOAMI β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
> Offensive Security Researcher operating at the intersection of web, API, network, and cloud security. I break systems before the bad guys do methodically, ethically, and relentlessly.
>
> Currently hunting vulnerabilities, crafting custom exploits, and pushing the boundaries of AI security research.
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β CORE DOMAINS β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββ Web Pentesting [90%]
ββββββββββββββββββββββββββββββββββββββββββββββββββ API Security [88%]
ββββββββββββββββββββββββββββββββββββββββββββββββββ Vulnerability Research[87%]
ββββββββββββββββββββββββββββββββββββββββββββββββββ Network Pentesting [85%]
ββββββββββββββββββββββββββββββββββββββββββββββββββ Recon & Enumeration [92%]
ββββββββββββββββββββββββββββββββββββββββββββββββββ Reverse Engineering [80%]
---
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β ARSENAL // TOOLS OF THE TRADE β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
Web & API
!BurpSuite
!SQLMap
!ffuf
!Nikto
!Dirsearch
!WhatWeb
!Postman
!Caido
Recon & OSINT
!Nmap
!Masscan
!Amass
!Subfinder
!DNSEnum
!Shodan
!Wireshark
Exploitation & Post-Exploitation
!Metasploit
!SearchSploit
!Impacket
!BloodHound
!Mimikatz
!NetExec
Password & Cracking
Wireless
---
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β LANGUAGES // PROGRAMMING & SCRIPTING β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
Primary
!Python
!Go
!Rust
!Bash
!PowerShell
Web & App
!JavaScript
!TypeScript
!PHP
!Java
!C
!C++
!C#
!Ruby
Other
---
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β OPERATING ENVIRONMENTS β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
!Kali
!Parrot
!BlackArch
!Arch
!Debian
!Ubuntu
!Fedora
!RHEL
!Windows
!macOS
!Android
---
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β GITHUB STATS β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
---
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β CONTRIBUTION MAP β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
---
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β "$ sudo -su sybau" β
β β Alham Rizvi β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
-
ParameterX β PINNED
No description.
Shell β 22 6mo agoExplain β -
XSSion β PINNED
Fastest Reflected XSS Finder v1
Python β 33 6mo agoExplain β -
Bug-Bounty-Roadmap β PINNED
Best Bug Bounty Roadmap for 2026
β 69 1mo agoExplain β -
urlx β PINNED
Multi-source URL discovery & live host probing for bug bounty and red team recon
Go β 24 8d agoExplain β -
rapzy β PINNED
Ultimate Web UI Subdomain Enumeration site
TypeScript β 25 6mo agoExplain β -
Inoue β PINNED
Web Tech-stack Fingerprinting Tool
Python β 13 7d agoExplain β -
Bug-Bounty-Methodology
No description.
β 28 1mo agoExplain β -
alhamrizvi-cloud
About Me
β 22 15h agoExplain β -
tr01d
Tr10d is a command-line tool designed for security researchers, penetration testers, and bug bounty hunters. Its primary purpose is to identify and extract sensitive information such as API keys, tokens, and other credentials from web page.
Python β 17 7mo agoExplain β -
ActiveDirectoryPentesting
This Repo Contains all the Active Directory Pentesting Related Stuff for OSCP, CPTS and CRTP
CSS β 11 1mo agoExplain β -
Binary-Exploitation
Complete Binary Exploitation for Exploit Development and CTFs
Python β 6 1mo agoExplain β -
CSPy
Content Security Policy & HTTP Security Headers Analyzer
Rust β 4 6mo agoExplain β -
KittyEnum
Auto enumeration tool :D
Python β 4 1mo agoExplain β -
JWTee
JWT Security Toolkit for bug bounty hunting and CTF challenges. Decode any JWT, sign custom tokens, embed files inside JWTs, and run a full suite of known JWT attacks all from the command line with zero dependencies.
Python β 4 4mo agoExplain β -
AWS-Pentesting
yes, AWS Pentesting is here :)
Python β 3 3mo agoExplain β -
ExploitDevelopment
for Exploit Development!
β 3 1mo agoExplain β -
ActiveDirectoryMaps
Easy peasy AD Diagrams for notes :)
β 3 19d agoExplain β -
OffsetX
A buffer overflow offset finder that instantly identifies exact EIP/RIP offsets using cyclic patterns for Binary Exploitation
Python β 3 3mo agoExplain β -
HackTheBox-Cheatsheet β
HackTheBox Cheatsheet I usually use.
β 3 3y agoExplain β -
Linux-PrivEsc
No description.
β 2 25d agoExplain β -
WinRiper
A Little Malware for Windows in Python
Python β 2 1mo agoExplain β -
DSA
YEAH lol
Python β 2 3mo agoExplain β -
CPTS-Path-Notes
No description.
β 1 9d agoExplain β -
HTB-tracker
No description.
TypeScript β 1 1mo agoExplain β -
Pentest-Cheatsheets
Happy Hacking
β 1 19d agoExplain β -
alhamrizvi-cloud.github.io
idk my portfolio maybe
HTML β 1 1mo agoExplain β -
Kernel-Development
idk stuff
β 1 2mo agoExplain β -
Cryptography
No description.
Python β 1 2mo agoExplain β -
django-filer β
File and Image Management Application for django
β 0 6d agoExplain β -
cms β
Multilingual PHP CMS built with Laravel and bootstrap
β 0 2y agoExplain β -
ActiveDirectoryHindi
Fun CPTS and CAPE path notes but in hindi πππ₯
β 0 11d agoExplain β -
filesystem-mcp-server β
A comprehensive Model Context Protocol (MCP) server for advanced file system operations. This server provides structured file management capabilities including file operations, directory management, file watching, search functionality, and archiving operations.
β 0 5mo agoExplain β -
HTB_Updates β
A Discord Bot that announces your members' HTB solves.
β 0 2y agoExplain β -
NorthBridgePortal
A Vulnerable Interesting College website, can you Hack it?!
PHP β 0 1mo agoExplain β -
MalwareDevelopment
ok this for school lol to understand how maldev works
β 0 2mo agoExplain β -
CVE-2025-24367-Cacti-PoC β
Proof of Concept for CVE-2025-24367
β 0 7mo agoExplain β
No repos match these filters.