Skip to content
View ridhinva's full-sized avatar
3 followers · 1 following

Block or report ridhinva

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ridhinva/README.md

👾 Ridhin V A

$ Bug Bounty Hunter • Security Researcher • Exploit Dev

HackerOne Followers X/Twitter Email

⚡ About

Bug bounty hunter targeting web applications, APIs, cloud infrastructure, and wireless systems.
I find vulnerabilities, write exploit tools, and share them with the community.

  • 🔴 HackerOne: realridhinofficia
  • 🐍 Stack: Python, Bash, JavaScript, TypeScript, C, SQL, Go, Rust
  • 🛠️ Tools: Burp Suite, Nmap, Metasploit, Ghidra, Frida, 100+ security skills
  • 🎯 Platforms: Immunefi, HackenProof, HackerOne, Bugcrowd

🔥 Featured Repositories

🎯 CVE Scanners (Actively Exploited)

Repo CVE Type Status
panos-captive-portal-rce CVE-2026-0300 PAN-OS BOF RCE (root) 🔴 CRITICAL · CISA KEV
cisa-kev-exploit-scanners 11+ CVEs Master scanner + PoCs 🔴 CRITICAL · CISA KEV
drupal-jsonapi-sqli-scanner CVE-2026-9082 Drupal PostgreSQL SQLi → RCE 🔴 CRITICAL · CISA KEV
beyondtrust-rce-scanner CVE-2026-1731 BeyondTrust Pre-auth RCE 🔴 CRITICAL · CISA KEV
ghe-push-option-rce-scanner CVE-2026-3854 GitHub Enterprise RCE 🔴 CRITICAL · CISA KEV
defender-privilege-escalation-scanner CVE-2026-41091/45498 MS Defender LPE/DoS 🟠 HIGH · CISA KEV
litellm-sqli-scanner CVE-2026-42208 LiteLLM SQLi 🟠 HIGH · CISA KEV
android-adb-bypass-scanner CVE-2026-0073 Android ADB Auth Bypass 🔴 CRITICAL · CISA KEV

🛠️ Security Toolkits

Repo Category Description
VulnHunterAI AI Pentest Autonomous AI-powered pentest framework with swarm intelligence, 47+ tools
API-Security-Toolkit API Sec REST, GraphQL, WebSocket, gRPC scanners + 72-pattern secret scanner
Cloud-Security-Toolkit Cloud Sec AWS, Azure, GCP, IaC misconfig, IAM, storage, network scanners
Web-Security-Toolkit Web App SQLi, XSS, SSRF, SSTI, CMDi, IDOR, CSRF, JWT attacks
Mobile-Security-Toolkit Mobile Android/iOS static & dynamic analysis, cert pinning bypass, IPC
Infra-Security-Toolkit Infra Linux, Windows, AD, K8s, Docker, Cloud hardening & vuln scans
Wireless-Security-Toolkit Wireless WiFi, Bluetooth/BLE, RFID/NFC auditing framework
Crypto-Attack-Toolkit Crypto RSA, hash attacks, lattice cryptanalysis, symmetric cipher attacks
Exploit-Dev-Toolkit Exploit Dev Protocol fuzzer, payload generator, ROP builder, shellcode encoder
Reversing-Toolkit Reverse Eng Binary exploitation, heap/stack overflow, VM reverse engineering

📡 Recon & OSINT

Repo Category Description
OSINT-Toolkit OSINT Domain recon, email OSINT, social search, breach monitoring
github-secret-scanner Secrets 72-pattern exposed-secrets scanner for bug bounty targets
netrecon Network Network reconnaissance & service enumeration
subdomain-finder Recon Subdomain enumeration & takeover detection

📻 Hardware & Wireless

Repo Platform Description
flipperwire Flipper One WiFi 6E & BT 5.2 exploitation for MT7921AUN
ghostwire Flipper One/RK3576 Modular wireless exploitation framework
pocket-s ESP32-S3 Open-source Flipper Zero alternative (Sub-1GHz, NFC, RFID, IR, BLE, WiFi)
usbrubberducky-payloads Hak5 USB Official USB Rubber Ducky payload repository

🛡️ Technical Skills

Penetration Testing     ████████████████████░  95%
Web Application Sec     ████████████████████░  95%
API Security            ███████████████████░░  85%
Network Security        ███████████████████░░  85%
Exploit Development     ██████████████████░░░  80%
CTF / Reverse Eng       █████████████████░░░░  75%
Cloud Security          ██████████████████░░░  80%
Mobile Security         █████████████████░░░░  75%
Wireless Security       █████████████████░░░░  75%
Smart Contract Audit    ████████████████░░░░░  70%

Specializations

  • Web: SQLi, XSS, SSRF, SSTI, CMDi, IDOR, CSRF, JWT attacks, auth bypass
  • API: GraphQL introspection, BOLA/IDOR, mass assignment, rate limit bypass
  • Infra: Linux/Windows hardening, AD attacks, K8s/Docker escape, cloud misconfig
  • Mobile: Android pentesting, iOS app security, Frida/Objection, cert pinning bypass
  • Crypto: RSA attacks, hash length extension, lattice crypto, symmetric cipher breaks
  • Reversing: Binary exploitation, heap/stack overflow, custom VM reverse engineering
  • Wireless: WiFi 6E, Bluetooth 5.2, RFID/NFC, SDR, protocol fuzzing
  • Smart Contracts: Solidity (Flying Tulip ftPUT), Clarity/Stacks (Zest v2), DeFi attack patterns

📊 GitHub Stats

GitHub Stats Top Langs

🎯 Current Focus

  • 🔬 Researching: AI-driven autonomous pentesting, LLM prompt injection, supply chain attacks
  • 🎮 Building: VulnHunterAI — fully autonomous pentest agent with swarm intelligence
  • 📝 Writing: Pine Script v5 trading strategies (SMC futures: structure, FVG, liquidity sweeps)
  • 🔍 Hunting: Immunefi/HackenProof — web3, cloud, API, wireless targets

📫 Contact & Links

Platform Handle
HackerOne realridhinofficia
X/Twitter @c_y_p_h3r
Email ridhinofficial@gmail.com
GitHub ridhinva
LinkedIn ridhinva

🤝 Open to

  • 💼 Contract security research (web3, cloud, API, mobile, wireless)
  • 🐛 Bug bounty triage/consulting (methodology, tooling, reporting)
  • 🛠️ Tool development (scanners, exploits, automation, AI agents)
  • 🎓 Mentoring (pentesting, bug bounty, exploit dev, reverse engineering)

⭐ Star the repos you find useful • 🍴 Fork to customize • 📬 Open issues for bugs/features

Popular repositories Loading

  1. drupal-jsonapi-sqli-scanner drupal-jsonapi-sqli-scanner Public

    Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)

    Python 2 1

  2. cisa-kev-exploit-scanners cisa-kev-exploit-scanners Public

    Actively exploited CVE scanners from CISA KEV + Twitter trends - Drupal SQLi, PAN-OS RCE, Android ADBD, GHE RCE, BeyondTrust, Defender, and more

    Python 2

  3. panos-captive-portal-rce panos-captive-portal-rce Public

    Scanner: CVE-2026-0300 PAN-OS User-ID Captive Portal Buffer Overflow RCE — Python CLI for detecting actively exploited BOF vulnerability in Palo Alto firewalls (CISA KEV 2026-05-13)

    Python 1

  4. android-adb-bypass-scanner android-adb-bypass-scanner Public

    Scanner: Android ADB Authentication Bypass / Wireless ADB RCE — Python CLI for detecting exposed ADB on port 5555 (CISA KEV)

    Python 1

  5. Mobile-Security-Toolkit Mobile-Security-Toolkit Public

    Toolkit: Mobile app security testing for Android and iOS — Python tools for static/dynamic analysis, certificate pinning bypass, and IPC testing

    Python 1

  6. VulnHunterAI VulnHunterAI Public

    Autonomous AI-powered pentest framework with swarm intelligence, 47+ security tools, multi-provider AI, and audit-ready reports.

    Python 1