~/rmrashahriar
RAFI (@rmrashahriar) official Spartan cyber security emblem

root@kali:~# whoami

RAFI

@rmrashahriar

Cybersecurity Researcher · Penetration Tester · Linux Passionate 🐧 · Python Exploit Developer

> Reverse Engineering · Binary Exploitation · Android AppSec

ACCESS GITHUB MAINFRAME ./repositories
  • LINUX PASSIONATE
  • ROLE PENTESTER
  • WEAPON PYTHON 3.12
  • CLEARANCE LVL 5

WHOAMI

operator profile // identity dossier

cat /etc/operator.conf

# ---- operator profile ----

name = "RAFI"

handle = "@rmrashahriar"

role = "Cybersecurity Researcher / Penetration Tester"

os = "Linux (Kali · Debian) — passionate"

weapon = "Python 3.12, Bash, C/C++"

focus = ["exploit-dev", "reverse-eng", "android-appsec", "linux-internals"]

doctrine = "Recon · Weaponize · Exploit · Harden"

github = "github.com/rmrashahriar"

status = ONLINE ●

0
Clearance level
0
Operational domains
0
Tools in arsenal
24/7
Uptime

CYBER ARSENAL

combat matrix // skill telemetry

./skills --matrix
Penetration Testing92%
Linux Internals & Hardening94%
Python Exploit Development90%
Reverse Engineering84%
Android / Mobile AppSec86%
Network Recon & Fuzzing88%
  • Python
  • Bash
  • C
  • C++
  • Kali Linux
  • Debian
  • Nmap
  • Scapy
  • Wireshark
  • Ghidra
  • IDA Pro
  • GDB
  • Frida
  • Xposed
  • MobSF
  • Docker
  • Git
  • SQLite
  • Kotlin
  • Android Studio
  • Neovim
  • SELinux

OPERATIONAL DOMAINS

methodology // areas of engagement

⚔ Penetration Testing & Red Teaming

Offensive assessment & vulnerability research

  • Network auditing & recon — port scanning, service enumeration, protocol fuzzing and packet manipulation with Scapy and Wireshark.
  • Python exploit development — custom socket exploitation, automated fuzzers, payload generators and PoC verification.
  • Web & API security — authentication bypass auditing, injection testing and server-side vulnerability chaining.
  • Privilege escalation — Linux credential hunting, SUID exploitation, misconfiguration analysis and kernel privesc.
# Recon · Weaponize · Exploit · Harden

🔬 Reverse Engineering & Mobile AppSec

Binary triage & Android platform security

  • Binary exploitation — ELF/PE inspection, decompilation with Ghidra and IDA Pro, dynamic debugging with GDB.
  • Android pentesting — APK decompilation, Smali patching, root-detection and SSL-pinning bypass with Frida & Xposed.
  • Systems hardening — SELinux policy, process sandboxing, attestation and memory-safety mitigations.
  • Static & dynamic triage — malware triage pipelines, MobSF assessments and traffic interception.
# Decompile · Hook (Frida) · Analyze · Patch

RECON

Map the attack surface. Enumerate everything.

WEAPONIZE

Craft tooling and payloads in Python.

EXPLOIT

Prove impact with a controlled PoC.

HARDEN

Report, patch and lock it down.

INTERACTIVE SHELL

type help to list commands

guest@rmrashahriar: ~

Welcome to the cyber range. Authorized guests only. Type 'help'.

GITHUB TELEMETRY

live activity // contribution matrix

RAFI (rmrashahriar) GitHub commit streak statistics rmrashahriar GitHub contribution grid snake animation

PUBLIC MAINFRAME CHANNEL

open a connection

You cannot defend what you do not understand. Break to harden.
ssh github.com/rmrashahriar