Skip to content
View kh00f's full-sized avatar

Highlights

  • Pro

Block or report kh00f

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
kh00f/README.md

πŸ‘‹ Hi, I'm khoof

Security Researcher | Bug Bounty Hunter | CVE Hunter


🧠 About Me

  • 🐞 Bug Bounty Hunter (Web / API / Mobile Apps)
  • πŸ” Security Researcher
  • 🧩 Strong focus on Business Logic & Access Control
  • πŸ” Source Code Review (manual & assisted)
  • 🎯 CVE Contributor β€” CVE-2025-55129
  • πŸ› οΈ Linux (Kali), Burp Suite, HTTPX, Nuclei, Custom tools
  • πŸ† Experience with ATO, Privilege Escalation, Logic Bugs

πŸš€ What I Hunt

βœ” Account Takeover (ATO)
βœ” Privilege Escalation
βœ” Business Logic Flaws
βœ” Access Control Bypass
βœ” API & GraphQL Issues
βœ” IDOR / CSRF / Auth Issues
βœ” Mobile App Vulnerabilities
βœ” Source Code Security Issues

🌐 Profiles & Contact


Hack responsibly β€’ Report professionally β€’ Impact matters

Popular repositories Loading

  1. kh00f kh00f Public

  2. vulne-log vulne-log Public

    TypeScript

  3. test-crash test-crash Public