Mursalin Molla

███╗ ███╗██╗ ██╗██████╗ ███████╗ █████╗ ██╗ ██╗███╗ ██╗
████╗ ████║██║ ██║██╔══██╗██╔════╝██╔══██╗██║ ██║████╗ ██║
██╔████╔██║██║ ██║██████╔╝███████╗███████║██║ ██║██╔██╗ ██║
██║╚██╔╝██║██║ ██║██╔══██╗╚════██║██╔══██║██║ ██║██║╚██╗██║
██║ ╚═╝ ██║╚██████╔╝██║ ██║███████║██║ ██║███████╗██║██║ ╚████║
╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝╚══════╝╚═╝╚═╝ ╚═══╝

███╗ ███╗ ██████╗ ██╗ ██╗ █████╗
████╗ ████║██╔═══██╗██║ ██║ ██╔══██╗
██╔████╔██║██║ ██║██║ ██║ ███████║
██║╚██╔╝██║██║ ██║██║ ██║ ██╔══██║
██║ ╚═╝ ██║╚██████╔╝███████╗███████╗██║ ██║
╚═╝ ╚═╝ ╚═════╝ ╚══════╝╚══════╝╚═╝ ╚═╝


bash
mursalin@kali:~$ cat whoami.txt

yaml
Name       : Mursalin Molla
Alias      : TheMursalin
Location   : Kolkata, India
Degree     : BCA @ IGNOU (2025 - 2027)
Role       : Penetration Tester · Security Researcher · Bug Bounty Hunter
Experience : Security Analyst Intern @ Craw Cyber Security (6 months)
Cert       : OSCP - In Progress
Open To    : Junior Pentester · VAPT Analyst · Remote / International Roles
Motto      : "Break things ethically. Fix things responsibly."

Current Ops

bash
mursalin@kali:~$ systemctl status current_ops

● WEBSCOUT.service
   Status  : active (running)
   Desc    : Web recon & CVE fingerprinting CLI
   Detects : 30+ technologies · CVE cross-reference · header/cookie audits

● BAC_HUNTER_V3.service
   Status  : active (running)
   Desc    : Broken Access Control testing suite
   Covers  : 19+ test cases · IDOR · JWT bypass · verb tampering · mass assignment

● SSRF_KILLER.service
   Status  : active (running)
   Desc    : SSRF detection & exploitation framework
   Covers  : 300+ bypass payloads · 9 cloud metadata targets · OOB detection

● oscp_prep.service
   Status  : active (running)
   Tasks   : HTB machines · manual exploitation · reverse shell delivery · AD attacks

📁 WebScout  ·  📁 BAC Hunter V3  ·  📁 SSRF Killer v2.0

Loadout

bash
mursalin@kali:~$ pacman -Q | grep skills

offensive-security  [installed]

!Web App Pentesting !Network Pentesting !Active Directory Attacks !VAPT !OWASP Top 10 !Bug Bounty

pentesting-arsenal  [installed]

!Burp Suite !Nmap !Metasploit !SQLMap !FFUF !BloodHound !Wireshark !Hashcat !Amass !Nikto

languages-cloud-os  [installed]


Writeups & CTF Notes

🐱 I publish HTB walkthroughs and CTF writeups right here on GitHub.
Star ⭐ this profile and follow @TheMursalin to get notified when a new one drops!

Machines covered so far:
Antique · Usage · CozyHosting · Broker · Sau · Expressway · Cicada · UnderPass · Headless · Escape · Remote · Mailing · Active · Forest · Busqueda · *(more dropping regularly)*

| 🐱 GitHub Writeups | 📺 YouTube |
|:---:|:---:|
| github.com/TheMursalin — ⭐ Follow! | Root With Mursalin — HTB walkthroughs |

Open Source Tools

• 🔍 WebScout — Web recon & CVE detection CLI. Fingerprints 30+ technologies (CMS, JS frameworks, web servers, CDNs), cross-references a CVE database, and audits HTTP security headers with severity-tagged JSON/HTML reports.
• 🎯 BAC Hunter V3 — Broken Access Control testing suite automating 19+ test cases — IDOR, JWT bypass, HTTP verb tampering, mass assignment — with a differential response comparison engine, CVSS scoring, and dark-themed HTML reports.
• 🛰️ SSRF Killer v2.0 — SSRF detection and exploitation framework with 300+ bypass payloads, multi-protocol support, cloud metadata harvesting across 9 cloud providers, and out-of-band (OOB) detection.

Experience

bash
mursalin@kali:~$ cat experience.log

> ♦️ Security Analyst Intern — Craw Cyber Security · *Sep 2025 – Mar 2026*
> - Worked on real-world cybersecurity projects, delivering results within deadlines
> - Gained hands-on exposure to threat analysis, vulnerability assessment, and security monitoring
> - Assisted in identifying and mitigating risks across systems and networks
> - Collaborated with senior analysts to strengthen organizational security posture

Achievements

| 🥷 HTB Rank | 🌍 TryHackMe | 🚩 CTFs | 🐛 Disclosures | 🔒 Certification |
|:---:|:---:|:---:|:---:|:---:|
| #899 / 2M+ users | Top 8% Worldwide | 150+ Solved | Grammarly (HackerOne) | OSCP — In Progress |

GitHub Analytics



bash
mursalin@kali:~$ ssh-keyscan --social

bash
mursalin@kali:~$ echo $MOTTO

*"Break things ethically. Fix things responsibly."* — Mursalin 🎯

Collapse