Skip to content
View Rehan137's full-sized avatar

Block or report Rehan137

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please donโ€™t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this userโ€™s behavior. Learn more about reporting abuse.

Report abuse
rehan137/README.md

Rehan Malek

./RM_SEC [OFFENSIVE SECURITY]

Typing SVG


"Turning academic concepts into practical research. Diving deep into emerging cyber threats."

๐Ÿšฉ Mission Brief

I'm currently an M.Sc. Cyber Security Student @ NSIT-NFSU, focused on Offensive Security. I apply real-world expertise in penetration testing, exploit development, and adversary simulation.

  • ๐Ÿ”ญ Currently working on: Advanced DevBoard development for Flipper Zero.
  • ๐ŸŒฑ Learning: Exploit Development & Hardware Hacking.
  • ๐Ÿ’ฌ Ask me about: Web App Security, Android Rooting, and CTFs.
  • โšก Fun fact: I built a forensic utility to bypass rooted phone locks using ADB shell.

๐Ÿš€ Featured Projects

๐Ÿ” OriginFind [ACTIVE]

OSINT reconnaissance framework to uncover origin servers and bypass CDN protections

  • Purpose: Identify real origin IP addresses behind CDNs (Cloudflare, Akamai, etc.) using advanced techniques like DNS history, SSL certificate analysis, and global scanning.
  • Tech stack: Python, Shodan API, Censys, asyncio, masscan.
  • Use case: Penetration testers and red teamers can map the true attack surface of a target behind WAF/CDN.
  • Status: Active development โ€“ currently adding historical DNS mining and automated report generation.

๐Ÿ› ๏ธ Root Phone Lock Bypass [COMPLETED]

Forensic utility for ethical research โ€“ connects to a rooted Android device via ADB and removes screenโ€‘lock files (bypass gesture/PIN) for authorized forensic investigations.

๐ŸŒ Enterprise Wi-Fi System [COMPLETED]

Team Lead โ€“ cloudโ€‘based deployment of FreeRADIUS + MariaDB + Nginx for secure 802.1X authentication.

โš”๏ธ Arsenal (Skills)

Category Tools & Technologies
Languages Python PHP Bash
Offensive Kali Metasploit Burp Suite
Analysis Wireshark Nmap OWASP
Dev HTML5 CSS3 Linux

๐Ÿ“‚ System Logs (Experience)

Cyndia CyberSpace LLP | Cyber Security Analyst

May 2025 โ€“ July 2025

  • Conducted vulnerability research and penetration testing.
  • Served as Team Lead for Enterprise Wiโ€‘Fi deployment (FreeRADIUS, MariaDB).

Sparks To Ideas | PHP Developer

Nov 2022 โ€“ Mar 2023

  • Backend scripting and web development โ€“ foundational experience now applied to security tooling.

๐Ÿ“Š Terminal Stats

Rehan's Stats Rehan's Top Langs

visitors

root@BuGGy137:~$ echo "OriginFind โ€“ scanning for truth..."

Popular repositories Loading

  1. buggymart-project buggymart-project Public

    BuggyMart is a simple e-commerce website built with PHP and MySQL. It is designed to be an easy-to-understand platform for learning about common web application vulnerabilities.

    PHP

  2. rehan137 rehan137 Public

    HTML 1

  3. windows95_portfolio windows95_portfolio Public

    Forked from renish47/windows95_portfolio

    My web portfolio whose design is inspired based on popular Windows-95 operating system's look.

    JavaScript

  4. origin-finder origin-finder Public

    Advanced 30-method origin IP discovery tool with CDN bypass and mathematical validation - Written in pure C with no external dependencies

    C