Skip to content
View touhidshaikh's full-sized avatar
💭
I may be slow to respond.
💭
I may be slow to respond.
110 followers · 17 following

Achievements

Achievement: StarstruckAchievement: Pull Sharkx3Achievement: QuickdrawAchievement: YOLOAchievement: Arctic Code Vault Contributor

Achievements

Achievement: StarstruckAchievement: Pull Sharkx3Achievement: QuickdrawAchievement: YOLOAchievement: Arctic Code Vault Contributor

Highlights

Organizations

@Initd-sh

Block or report touhidshaikh

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
touhidshaikh/README.md

Typing SVG

🕶️ About Me

I'm a Security Researcher based in India 🇮🇳.
I hunt bugs, break systems, and build tools that help others do the same 🔥

  • 🎯 10+ CVEs published (XSS, RCE, SQLi, Auth Bypass, etc.)
  • 🛠️ Contributor to Exploit-DB, Metasploit, and CIS Benchmarks
  • 🎤 Speaker at CrestCon (London) & ThreatCon (Kathmandu)
  • 🧠 Shellcode author and CTF machine creator for HTB & VulnHub

🧙‍♂️ Hacker Highlights

> echo "Touhid Shaikh"
┌──(root💀touhid)-[~/research]
└─$ whoami
Security Researcher | Exploit Developer | Open Source Contributor

┌──(root💀touhid)-[~/CVEs]
└─$ cat highlights.txt

✅ OSCP | OSCE | CRT | CPSA | ISC² CC
🚨 CVE-2024-43381 – Stored XSS in reNgine
🎯 RCE on Netgear, TP-Link, OnePlus Web Services
🎓 MBA (ITASM) | BSc IT
🌍 Conferences: CrestCon (UK), ThreatCon (Nepal)

📕 Latest Blog Posts

🧰 Tech Stack & Tools I Use

Python PHP Docker Metasploit Burp Suite Git Kali Linux

🏆 CVEs & Research Contributions

  • 🔒 CVE-2024-43381 – Stored XSS in reNgine
  • 💥 CVE-2021-29069 – Command Injection in Netgear Router
  • 🛡️ CVE-2018-11714 – Auth Bypass in TP-Link Routers
  • 🖥️ 10+ total CVEs — see full list on Exploit-DB

🐛 Bug Bounty Hall of Fame

Proud to be acknowledged by:

  • 🍏 Apple – Security Misconfiguration
  • 🌐 Synology – Remote Code Execution, SSRF and Security Misconfiguration
  • 📶 Netgear – Remote Code Execution and XSS and Security Misconfiguration
  • 🔐 OnePlus – Remote Code Execution
  • 🎯 Arlo, Registrar.gov, HackTheBox, PlaySMS, and more.

📚 Featured Work

🧠 Custom Labs Created

🔗 Connect with Me

🙌 Mentions

Thanks to everyone who has referenced or credited my work in their repositories!

📟 GitHub Stats & Hacker Vibes

Pinned Loading

  1. shellcode shellcode Public

    C 11 1

  2. 403Override-NG 403Override-NG Public

    An advanced, multi-threaded Burp Suite extension designed to automate the discovery of 401 Unauthorized and 403 Forbidden access control bypasses. This tool utilizes aggressive path mutation, heade…

    Python

  3. Writeup-DB/CyberTermX Writeup-DB/CyberTermX Public

    A Cyberpunk Terminal-Style Portfolio for Security Researchers or Hackers.

    HTML 2

  4. Writeup-DB/JWT-101-Lab Writeup-DB/JWT-101-Lab Public

    This vulnerable environment is designed to provide hands-on experience with the attack vectors associated with JSON Web Tokens (JWT, JWS, and JWE).

    Python

  5. Writeup-DB/The-Phantom-Directory Writeup-DB/The-Phantom-Directory Public

    PHP

  6. Writeup-DB/TheForbiddenFortress Writeup-DB/TheForbiddenFortress Public

    This intentionally vulnerable environment is designed to demonstrate and test the capabilities of the 403Override NG Burp Suite extension. It simulates real-world architecture discrepancies between…

    HTML