Skip to content
View SanaullahAmanullah's full-sized avatar
3 followers · 2 following

Block or report SanaullahAmanullah

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
SanaullahAmanullah/README.md

Typing SVG


LinkedIn GitHub Medium Email

Location



⚡ About Me

Security engineer with an offensive background and a builder's mindset.
I break web apps, APIs, and mobile clients — then automate the boring parts so findings get caught faster and fixed for good.

🎯 What I Do Well

  • 🔓 Pentesting & Red Team — web, API, and mobile targets; IDOR, authz bypass, business logic flaws
  • 🔍 Secure Code Review — Java, .NET, JavaScript, PHP — flaws caught before they ship
  • 🏗️ STRIDE Threat Modeling — trust boundaries and risky data flows mapped in design phase
  • 🐍 Python Security Tooling — SAST rules for CI/CD, recon pipelines, exploit automation
  • 🛰️ Synack Red Team — hunting production systems that scanners miss

🚀 What I'm Exploring

  • 🤖 AI/LLM Security — prompt injection, indirect injection, agent tool-use trust boundaries
  • ☁️ Cloud Security — AWS IAM hardening, detection pipelines
  • 📦 Containers — Kubernetes & container security at scale
  • 🧪 Research — experimental AI-powered code review CLI (early-stage, published on Medium)

"Find the pattern. Automate the detection. Scale the fix."


🛠️ Tech Stack

Languages I Work In

Python Java JavaScript PHP Bash C#

Security Tools

Burp Suite Nessus Semgrep Wireshark Nmap

Infrastructure & DevOps

AWS Docker GitLab CI GitHub Actions Linux

Protocols & Standards

HTTP/2 DNS TCP/IP TLS OAuth 2.0 / OIDC SAML JWT OWASP Top 10 CIS Benchmarks STRIDE


🚀 Featured Projects

🔐 burp-sec-skills

Claude Code skill pack that automates pentest workflows — IDOR hunting from Burp history, JavaScript endpoint analysis, JWT attack matrix, API surface mapping, structured write-ups. Built on the RCTF prompting framework.


Claude Code Skills Burp MCP JWT



Repo

🛡️ semgrep-security-rules

20+ CI/CD SAST rules mapped to confirmed real-world findings — Express IDOR, NoSQL injection, JWT algorithm confusion, hardcoded secrets, Spring mass assignment, SQLi via string formatting. Drop-in GitHub Actions workflow.


Semgrep GitHub Actions GitLab CI



Repo

📋 api-threat-model

OpenAPI spec → per-endpoint STRIDE threat models + prioritized test plans in one command. 1,292 lines of Python across 7 modules, fully offline, zero dependencies. Turns a 3-hour manual mapping into 30 seconds.


Python OpenAPI 3.x STRIDE



Repo

🤖 ai-sec-review

Experimental CLI exploring LLM-augmented security code review — where AI-assisted analysis adds value and where it falls short. 1,100+ lines of Python, zero external dependencies.


Python LLM APIs Research



Repo Article

🏆 Highlights & Credentials

🏆 Highlights
🥇 HTB Pro Hacker — top 1% rank · profile/403075
🛰️ Synack Red Team — active contributor on production targets
🎯 Yogosha — active hunter on the Yogosha bug bounty platform

📜 Certifications


OSCP OSCP+ eWPT eCPPTv2 CRTP CRTA eJPT

🎯 Current Focus

Building:
  - burp-sec-skills — Pentest automation skills for Claude Code
  - semgrep-security-rules — CI/CD SAST rules from real findings
  - api-threat-model — OpenAPI → Threat Model CLI

Learning:
  - AWS Security Architecture & hardening patterns
  - AI Agent security & MCP trust boundaries
  - Detection engineering at scale
  - Kubernetes & container security

🤝 Connect

LinkedIn GitHub Medium Email


"Security is an engineering discipline. Build it in, don't bolt it on."


Popular repositories Loading

  1. ghost-sender ghost-sender Public

    Exchange Online email spoofing PoC — Ghost Sender vulnerability. Delivers spoofed emails bypassing SPF, DKIM, and DMARC when external MX records are configured without a partner connector. Includes…

    Python 1 1

  2. xss2shell-check xss2shell-check Public

    Non-destructive detector for CVE-2026-64638 (XSS2Shell) — WordPress pre-auth XSS reflection primitive

    Python 1

  3. ai-sec-review ai-sec-review Public

    AI-augmented security code review and threat modeling tool using LLM APIs

    Python

  4. burp-sec-skills burp-sec-skills Public

  5. semgrep-security-rules semgrep-security-rules Public

  6. api-threat-model api-threat-model Public

    Python