Name: Khaled Mohamed
Type: User
Company: Penetration tester at @bugswagger
Bio: Penetration tester at @bugswagger | Bug hunter | Security Researcher at Hackerone, Detectify Crowdsource, Synack Red Team.
Twitter: 0xElkomy
Location: Egypt
Hi, I'm Khaled Mohamed [xElkomy] , Bug hunter and Penetration tester for more than 3 years.
Visitor Count
Languages and Tools:
portfolio
My Portfolio
progress-burp
Burp Suite extension to track vulnerability assessment progress
random-robbie
redteam
Red Team Mind Map
rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
s3-from-csp
Extracts all S3 Buckets from CSP report headers and then tests for file upload vulns
scanapi
Subdomains-enumeration, subdomain-takeover monitoring api and S3 bucket scanner.
scant3r
ScanT3r - Web Security Scanner
sicks3c
sublert
sublert with discord webhook instead of slack
subover
A Powerful Subdomain Takeover Tool
sudomy
Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way ( Easy, light, fast and powerful )
theblackturtle
ugly-duckling
Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules
weaponize-your-burp
Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite
wordpress-plugins-exploits
I will post some exploits of my WordPress plugins before they are published by the owners
workflow-bug-bounty
My Tools For Bug Bounty
wso2-unauthenticated-ssrf
xelkomy
Readme about Khaled Mohamed xElkomy
xelkomy.github.io
xElkomy blog
xless
The Serverless Blind XSS App
xsshunter-express
An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!
zaproxy
The OWASP ZAP core project
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
š Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ššš
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ā¤ļø Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
