I build SOC, harden infrastructure and hunt for vulnerabilities before attackers do. Went from first-line support to security and built a company's security program from scratch.
A fault-tolerant Wazuh cluster, vulnerability and alert triage in my own Qalqan panel, incident investigations.
Active Directory and workstations by CIS Benchmark, Linux server hardening, DDoS protection and automation.
Hunting vulnerabilities on HackerOne and Bugcrowd, CTFs, and Qyran — my own recon and audit platform.
BugBounty Hub: Your one-stop destination for Bug Bounty excellence! Explore Nuclei Templates and BugBounty Worldlists for comprehensive security testing. Join the fight for internet security today! (used in reconWTF)
This tool is intended for bounty hunters, the script installs and launches the best set of tools for expanding the attack surface, for Web Sites, portals, and Organizations.
HTTP2Shell is a lightweight HTTP API server written in pure Bash using socat. It provides REST-like endpoints for controlled remote command execution and system info, using the system shell or a user-defined one. Designed for internal automation, DevOps, labs, and CTFs — not for public exposure.
ScriptHub: Это веб-страница, предоставляющая коллекцию полезных скриптов для серверов. Здесь вы можете легко скопировать и вставить скрипты в терминал для автоматизации задач и упрощения управления сервером.
A Python script that exports vulnerabilities from Wazuh (Elasticsearch) and imports them into DefectDojo via the Generic Findings Import API. Supports automated rescanning and can be run as a cron job.
Domain Hosting Viewer Administrator - Hosting system administrator assistant or customer support employee
GitHub data refreshes automatically every day · last updated November 10, 2026
Create, grow, achieve. Think, learn, defend! Sharpen your skills, strengthen your defenses and find vulnerabilities before attackers do.