FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Original HTTPS Page]

0xmrsecurity (MR.X Security) · GitHub

Overview Repositories 20 Projects Packages Stars 25
🌴
On vacation
🌴
On vacation
8 followers · 9 following

Achievements

Achievements

Block or report 0xmrsecurity

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Close all issues, pull requests, and discussions opened by this user Content in all repositories owned by your account will be closed.
Add an optional note
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
0xmrsecurity/README.md

👾 About Me

class Suraj:
    name     = "Suraj Gupta"
    alias    = "0xmr"
    role     = "Pentester & Cloud Security Engineer"
    domains  = ["Web", "Active Directory", "AWS", "AI/LLM"]
    language = ["Python", "Bash"]
    
    def mission(self):
        return "Find it before the bad guys do."
  • 🔭 Currently pentesting Web, AD, AWS & AI/LLM
  • 🌱 Deep-diving AWS Security, AI/LLM attacks, Web Advanced
  • 🐛 Disclosed IDOR vulns, exposed S3 buckets, Grok/Kimi findings
  • 📖 Personal cheatsheet & notes → 0xmr.qzz.io
  • 🤝 Open to collaborate → github.com/0xmrsecurity

🏆 Real-World Findings

# Vulnerability Target Impact
🔓 IDOR × 2 Live Production Systems Unauthorized data access exposed
🪣 Exposed S3 Bucket Live Production Sensitive data publicly accessible
💉 Command Injection Grok AI (via Chatbot) Remote command execution vector
📤 System Prompt Extraction Kimi AI (Chinese LLM) Full system prompt leaked

🛠️ Tech Arsenal

Languages

Pentesting Tools

Cloud & OS

🚀 Featured Projects

Netspray

Netspray:- NetSpray is a wrapper script designed to save time when performing password or hash spraying across multiple protocols. It leverages the power of NetExec to automate the process efficiently.

live_Project_link

Usage: NetSpray <protocols|all> <targets|subnet> -u <username> [-p <password> | -H <hash>] [OPTIONS]

Scrad

Scrad:- This tool finds hidden endpoints across the entire website using js.

live_Project_link

Usage Ready to use from brower, just click on scrad bookmark and it will open a new page with in a 2 seconds.

Public POC Repo

Public POC (Proof of Concepts):- list of public Exploit in python and bash languages.

live_Project_link

Pentesting Notes site

Pentesting Notes

0xmr.qzz.io

📜 Certifications & Training

"Certifications are expensive. Skills are not. Here's the proof of work."

🏫 Cybrary — Offensive Penetration Testing
🛰️ ISRO — Geo-data Sharing & Cyber Security
☁️ SimplyCyber — Intro to AWS Pentesting
🏢 SimplyCyber — Hacking Active Directory

⚔️ TryHackMe — Offensive Pentesting Path
🌐 TryHackMe — Web Exploitation Path
🔴 TryHackMe — Red Teaming Path

📈 Currently Leveling Up

☁️  AWS Security     ███████████       Deep dive: IAM escalation, Lambda abuse, EC2 , S3 etc.
🤖  AI/LLM Security  ███████████       Prompt injection, model extraction, System Prompt Extract and Jail Break.  
🌐  Web Advanced     ████████          OAuth/OTP, SSRF chains, LFI, Command Injection.

📊 GitHub Stats


"The quieter you become, the more you are able to hear."

Pinned Loading

  1. OSCP OSCP Public

    try the awesome script , you always thanks to me ...

    Shell 11

  2. ad2enum ad2enum Public

    This Repo contains the Active Directory Enumeration scripts.

    Shell 1

  3. 0xmrsecurity.github.io 0xmrsecurity.github.io Public

    Pentesting Notes

    Shell 11

  4. Public_Poc Public_Poc Public

    I write the python and bash Proof of Concept for the better understanding of attacks.

    Python 10

Back | FazBrowse Home | New Git URL