Skip to content
View Rajib-Mahmud's full-sized avatar
👾
blablabla
👾
blablabla
  • rakibwww6@gmail.com
  • Bangladesh
  • 20:07 (UTC +06:00)

Highlights

Block or report Rajib-Mahmud

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Rajib-Mahmud/README.md

Rajib Mahmud — Security Researcher · Bug Bounty Hunter · CTF Player

Typing SVG

views 


const rajib = {
  role: "Independent Security Researcher",
  base: "Dhaka, Bangladesh 🇧🇩",
  focus: ["web app security", "source code auditing", "vuln research"],
  reads: ["PHP", "TypeScript", "Python", "Solidity"],
  stack: ["Burp Suite", "custom recon tooling", "a lot of coffee"],
  philosophy: "quality over volume — no report without a working PoC",
};

~/ tooling

🛰️ surfmap

Attack surface intelligence — subdomains, URLs, API schema & parameter discovery, JS analysis, Telegram notify.

🐾 bountyhound

Multi-platform bug bounty program discovery with real-time Telegram alerts.

⛏️ quarry

Python CLI orchestrator for recon pipelines with SQLite dedup.

✍️ write-ups

CTF & research write-ups — Intigriti monthly challenges and more.

~/ stack


~/ stats

All research conducted under responsible disclosure · authorized testing only.

Pinned Loading

  1. baf-shaheen-classnotes baf-shaheen-classnotes Public

    Note sharing platform for BAF Shaheen College, Dhaka — share and revise class notes before exams A web app for BAF Shaheen College students to upload and access class notes by subject and chapter C…

    Python

  2. surfmap surfmap Public

    Attack Surface Intelligence for Bug Bounty Hunters — URL, Subdomain, API Schema, Parameters, JS Analysis + Telegram Notify

    Python

  3. intigriti-0626 intigriti-0626 Public

    Inside Job — scriptless XSS / CSP report oracle write-up for Intigriti Challenge 0626

    HTML

  4. R-K1B R-K1B Public

    HTML 1

  5. intigriti-0726 intigriti-0726 Public

    Canonically Yours — signing one package, publishing another. Intigriti 0726 write-up. Cross-namespace read via JSON duplicate-key parser differential (Intigriti July 2026)

    HTML