Md Shariar Shanaz Shuvon

claude-bug-bounty. AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.

public-skills-builder. Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed

web3-bug-bounty-hunting-ai-skills. 18 Claude Code skill files for smart contract security — built from 2,749 Immunefi reports, 681 DeFiHack reproductions, and real hunt experience

bug-bounty-report-generator. Python

cve-hunter. Python

vuln-scanner. Shell

shuvonsec.

BugBountyBooks. A collection of PDF/books about the modern web application security and bug bounty.

Bug-Bounty-Beginner-Roadmap. This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

vulnerability-Checklist. This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Mind-Maps. Mind-Maps of Several Things

mdshuvon. Config files for my GitHub profile.

IoTGoat. IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.

ODIN. Automated network asset, email, and social media profile discovery and cataloguing.

ScamShield.my. A two-sided, AI-powered security product for Malaysia-first, ASEAN-next. It stops scams for normal people and auto-hardens small business websites without needing a SOC. Open core on GitHub, SaaS on Vercel. It’s useful on day one, not after a thousand inspirational LinkedIn posts.

zero-day-fuzzer. Python

shodan-filters. A list of shodan filters

retire.js. scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

x8. Hidden parameters discovery suite

waybackurls. Fetch all the URLs that the Wayback Machine knows about for a domain

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

bbtech.shop. JavaScript

skills-introduction-to-github. My clone repository

full-hunt-pipeline. Shell

bug-bounty-hunt. Python

full-target-hunt. Shell

bug-bounty-validator. Python

ai-copilot-payload-builder. Python

google-dork-runner. Python

bug-bounty-target-selector. Python