Skip to content
View XploitPoy-777's full-sized avatar
🤖
XploitPoy-777
🤖
XploitPoy-777
14 followers · 0 following

Achievements

Achievement: QuickdrawAchievement: Starstruck

Achievements

Achievement: QuickdrawAchievement: Starstruck

Block or report XploitPoy-777

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
XploitPoy-777/README.md

Hi 👋, I'm XploitPoy-777

Red Teamer | Penetration Tester | Security Researcher

Web • API • Network • AWS • AI/LLM Security
CTF Player • Bug Bounty Hunter • LPT Master

About Me

I am a Red Teamer and Penetration Tester specializing in securing modern applications and infrastructure.

My expertise includes Web, API, Network, AWS Cloud and AI/LLM application security, with real-world experience finding critical vulnerabilities at organizations including NASA, Amazon, Stanford University, RMIT University and MTM Group through active bug bounty research on HackerOne and Bugcrowd.

I hold the Licensed Penetration Tester (LPT) Master and CPENT v2 certifications from EC-Council, and I'm passionate about strengthening systems against modern threats — including researching prompt injection & LLM security vulnerabilities.

🎓 Certifications: LPT (Master) • CPENT v2 • CNSP • CRTOM • CAPIE • CWAP • CAP

HackerOne Bugcrowd TryHackMe HackTheBox Hackviser CTFtime

🏆 Achievements & Recognition

🏅 NASA Hall of Fame + Letter of Recognition
🏅 Hall of Fame — University of Canterbury
🏅 Finalist — HackerOne BugHunt Bangladesh 2026
🏅 Coins Awards — Top 100, Bugcrowd Black Hat USA CTF 2025
🏅 Hackers4Humanity Graduate — Recognized at HackerHalted 2026 (EC-Council)
🏅 Thanks Received — Amazon, TECNO SRC, MTN Group, ION Group

🚩 CTF & Cyber Competitions

🥇 CUET StealthFlags 2025 — 6th Place
🥈 MIST Cyber Drill 2025 — 13th
🥉 Knight CTF 2026 — 15th
🎯 BDSec CTF 2025 — 22nd
🎯 BCS ICT FEST 2025 — 24th
🏅 Participated in 20+ CTF competitions

🔬 Current Interests

  • AI/LLM Security & Prompt Injection Research
  • Advanced Red Team Techniques
  • Bug Bounty & Vulnerability Research
  • Cloud (AWS) Penetration Testing

🔥 Contribution Streak

GitHub Contributions

Contribution Graph
Snake animation


🔗 Connect & Follow

GitHub LinkedIn Website YouTube Medium

Pinned Loading

  1. ScriptSentry ScriptSentry Public

    ScriptSentry is an advanced JavaScript security scanner designed to detect exposed secrets, vulnerabilities, and sensitive data in JavaScript files. It automatically crawls websites to discover JS …

    Python 2 1

  2. 0xSubZero 0xSubZero Public

    0xSubZero is an advanced automated subdomain enumeration tool for bug bounty hunters, penetration testers, and security researchers. It gathers subdomains using both passive and active techniques, …

    Shell 2

  3. RoboSploit RoboSploit Public

    A powerful, multi-threaded scanner designed for bug bounty hunters and penetration testers to detect exposed or sensitive paths hidden via robots.txt. Supports HTTP/2, advanced 401/403 bypass techn…

    Python 1 2

  4. MapVuln MapVuln Public

    Advanced security tool for uncovering hidden vulnerabilities through sitemap analysis

    Python

  5. Shodan-IP-Extractor Shodan-IP-Extractor Public

    A powerful Python-based CLI tool to extract IP addresses from Shodan search results using the official Shodan API.

    Python

  6. Error-Sqli Error-Sqli Public

    A powerful multi-threaded scanner for detecting SQL and NoSQL injection vulnerabilities with advanced WAF bypass techniques and comprehensive reporting.

    Python 2