class MuhammadFaizan:
def __init__(self):
self.name = "Muhammad Faizan"
self.alias = "faizzyhon"
self.email = "faizzyhon@gmail.com"
self.role = "Cybersecurity Researcher & Bug Bounty Hunter"
self.cert = "EC-Council Bug Bounty Professional"
self.location = "π Hack the Planet"
@property
def focus(self):
return [
"PHP Web Application Pentesting",
"OWASP Top 10 Vulnerability Research",
"Business Logic Bypass & Payment Testing",
"Automated Security Scanner Development",
"CVE Research & Responsible Disclosure",
]
@property
def current_projects(self):
return [
"π₯ BugScanner β PHP Web Security Scanner",
"β‘ Cyberburg β Advanced Web Pentest Suite (v2.0 PHANTOM BLADE)",
]
def motto(self):
return "β‘ Think like an attacker. Defend like a guardian."|
BugScanner is a professional-grade PHP Web Security Scanner built for Bug Bounty hunters and Ethical Hackers. It automates detection of OWASP Top 10 vulnerabilities with AI-powered CVSS 3.1 scoring and generates HackerOne-ready PDF reports. Built for EC-Council Bug Bounty course β real-world training target tested. |
|
# Install & Launch
$ git clone https://github.com/faizzyhon/BUGSCANNER---PHP-Web-Security-Scanner-for-Bug-Bounty-Penetration-Testing
$ pip install -r requirements.txt
$ python main.py scan --url https://target.com --modules all --auth --report pdf| Module | Coverage | OWASP Category |
|---|---|---|
sqli |
SQL Injection + DB Dump | A03: Injection |
xss |
Reflected / Stored / DOM | A03: Injection |
auth |
JWT / Brute-Force / Session | A07: Auth Failures |
payment |
Race Condition / IDOR | A04: Insecure Design |
php |
LFI/RFI / Webshell / SSTI | A05: Misconfig |
idor |
Horizontal / Vertical Priv Esc | A01: Broken Access |
ssrf |
Internal Network Probing | A10: SSRF |
|
Cyberburg is a full-stack Linux Web Penetration Testing Framework that orchestrates 30+ professional security tools under a single terminal interface. It runs tools in sequence, parses their output automatically, correlates findings across modules, and generates professional dark-themed HTML security reports β all in one command. Built for professional pentesters, bug bounty hunters, and red teamers. |
|
# Install & Launch
$ git clone https://github.com/faizzyhon/cyberburg
$ sudo bash install.sh
$ python3 cyberburg.py # Interactive menu
$ python3 cyberburg.py -t https://target.com # Full scan
$ python3 cyberburg.py -t target.com --quick # Quick scan
$ python3 cyberburg.py -t target.com --stealth # Stealth mode| Module | Tools Used | Coverage |
|---|---|---|
recon |
whois, dig, subfinder, amass, theHarvester | OSINT + DNS |
ports |
nmap (6 modes) | TCP/UDP + OS fingerprint |
web |
nikto, whatweb, wafw00f, curl | OWASP headers, WAF, CMS |
sqli |
sqlmap (BEUSTQ) + manual | All SQLi techniques |
xss |
dalfox + DOM analysis | Reflected / DOM XSS |
dirs |
gobuster, ffuf, dirb | Files, APIs, admin panels |
ssl |
sslscan, openssl | TLS 1.0/1.1, ciphers, CVEs |
nuclei |
nuclei templates | 7000+ CVE & misconfig checks |
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β SECURITY RESEARCHER PROFILE β
β βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ£
β Specialization : PHP Web Application Security β
β Methodology : OWASP Top 10 (2021) + Custom Playbooks β
β Report Format : HackerOne / Bugcrowd Standard β
β Scoring System : CVSS v3.1 (Base + Temporal + Environmental)β
β Tools Built : BugScanner β Automated PHP Pentest Suite β
β Cyberburg β Advanced Web Pentest Suite β
β Course : EC-Council Bug Bounty Professional β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
|
Web Application Security
|
Authentication & Session
|
Infrastructure & Network
|
| Project | Description | Tech | Status |
|---|---|---|---|
| π₯ BugScanner | PHP Web Security Scanner β OWASP Top 10 automated with CVSS scoring & PDF reports | Python, Click, Rich | β Featured |
| β‘ Cyberburg | Advanced Linux Web Pentest Suite β 30+ tools, 8 scan modules, HTML/JSON reports | Python, Rich, Nmap, Nuclei | π΄ v2.0 LIVE |
π¬ Open to: Bug Bounty Collaborations β’ Security Research β’ Open Source Contributions
ββββ βββββββ ββββββ βββ ββββββ ββββ ββββββββ ββββ ββββββ βββββββ
βββββ ββββββββ ββββββ ββββββββββββββββ ββββββββββ βββββββββββββββββββββ
ββββββββββββββ ββββββββββββββββββββββββββββββββββββββββββββββββββββ βββ
ββββββββββββββ ββββββββββββββββββββββββββββββββββββββββββββββββββββ βββ
βββ βββ βββββββββββββββ ββββββ ββββββ βββ ββββββ βββ ββββββ βββββββββββ
βββ βββ βββββββ βββ ββββββ ββββββ ββββββ ββββββ ββββββββββ
ββββββββ ββββββ βββββββββββ ββββββ ββββ βββ
ββββββββββββββββββββββββββββββββββββββββ βββ
ββββββ βββββββββββ βββββ ββββββββββββββ βββ
ββββββ βββββββββββ βββββ ββββββββββββββββββ
βββ βββ βββββββββββββββββ ββββββ ββββββ
βββ βββ βββββββββββββββββ ββββββ βββββ
γ Hack the Planet π | Think Offensive. Stay Ethical. γ
