Skip to content
View hardw00t's full-sized avatar

Block or report hardw00t

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
hardw00t/README.md

Typing SVG


Website GitHub LinkedIn Twitter


Certifications

OSCP OSWP ISO 27001


Profile Views


> whoami

class SecurityResearcher:
    def __init__(self):
        self.name = "Hardik Mehta"
        self.handle = "hardw00t"
        self.location = "Abu Dhabi, UAE"
        self.role = "Security Researcher"

        self.focus_areas = [
            "Breaking applications before attackers do",
            "Finding 0-days in complex systems",
            "Securing the software development lifecycle",
            "Bridging AI capabilities with security needs"
        ]

    def current_mission(self):
        return "Making the digital world safer, one vulnerability at a time."

> cat /etc/specializations

Application & Code Security

AppSec SAST DAST Code Review SSDLC

Vulnerability Research & Exploitation

VulnResearch Exploitation Fuzzing Reversing

Mobile Security

Android iOS Mobile Pentesting

Cloud & Infrastructure

Cloud Security Kubernetes Container DevSecOps

Specialized Domains

AI Security Telecom Embedded Network

Methodologies & Frameworks

Threat Modeling Risk Assessment Security Automation


> cat /var/log/cve_discoveries.log

Published CVEs

CVE ID Target Description Year
CVE Apple iOS VoLTE Implementation Vulnerability - Critical flaw affecting mobile communication security, voice call privacy and integrity 2021
CVE WebKit webkitFaviconDatabaseSetIconURLForPageURL mishandles unset pageURL in Safari Technology Preview, leading to application crash 2018
CVE GNOME Evolution Buffer overflow vulnerability in GNOME Evolution email client 2018
CVE GNOME Web Security vulnerability in Epiphany (GNOME Web browser) 2018
CVE Various Security vulnerability discovered and responsibly disclosed 2018

> ls -la /tools

Languages & Scripting

Python Go Bash C JavaScript

Security Tools

Burp Suite Frida Ghidra IDA Pro Semgrep

Cloud & DevOps

AWS Azure GCP Docker Kubernetes


> ./stats.sh




GitHub Trophies


> cat featured_projects.txt

simple_semgrepAI FalconEYE


> tail -f philosophy.log

┌──────────────────────────────────────────────────────────────────────────────┐
│                                                                              │
│   "The best way to predict the future of security is to break the present." │
│                                                                              │
│   > Security is not a product, it's a process                                │
│   > Every system can be broken - the question is how                         │
│   > Defense in depth: because single points of failure are for amateurs      │
│   > Automate the boring stuff, focus on the creative exploitation            │
│                                                                              │
└──────────────────────────────────────────────────────────────────────────────┘

> Let's Connect


Email Website Twitter


████████████████████████████████████████████████████████████████████████████████
█─█─██▀▄─██▄─▄▄▀█▄─▄▄▀█▄─█▀▀▀█─▄█─▄▄─█─▄▄─█─▄─▄─█
█─▄─██─▀─███─▄─▄██─██─██─█─█─█─██─██─█─██─███─███
▀▄▀▄▀▄▄▀▄▄▀▄▄▀▄▄▀▄▄▄▄▀▀▀▄▄▄▀▄▄▄▀▀▄▄▄▀▀▄▄▄▀▀▀▄▄▄▀▀
████████████████████████████████████████████████████████████████████████████████

Wave

Popular repositories Loading

  1. ai-security-arsenal ai-security-arsenal Public

    A collection of skills, agents, commands, and workflows for security researchers. Compatible with Claude Code, Claude Desktop, OpenCode, and other AI coding tools.

    Python 89 15

  2. simple_semgrepAI simple_semgrepAI Public

    AI-powered code security scanner that combines Semgrep's static analysis with LLM-based validation

    Python 10

  3. UACME UACME Public

    Forked from hfiref0x/UACME

    Defeating Windows User Account Control

    C 9 2

  4. Mimikatz.exe-in-JS Mimikatz.exe-in-JS Public

    2 2

  5. Checklists Checklists Public

    Forked from netbiosX/Checklists

    Pentesting checklists for various engagements

    1