Skip to content
View hexxmate's full-sized avatar
💀
Hacking ... oh ethically ofcourse
💀
Hacking ... oh ethically ofcourse
7 followers · 50 following

Achievements

Achievement: Quickdraw

Achievements

Achievement: Quickdraw

Block or report hexxmate

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
hexxmate/README.md

Hey there 👋 I'm Mostafa Hamza (hexxmate)

Security Researcher • Full-Time Bug Bounty Hunter • Based in Egypt 🇪🇬

Breaking web apps for a living, writing about it, and hunting flags on the side.

What I Do

  • 🔭 Full-time bug bounty hunter — YesWeHack, HackerOne, and Bugcrowd
  • 🤖 Building a RAG-based AI agent system for hacking — using AI to accelerate recon, triage, and vuln hunting
  • ⚙️ Building scripting & automation tools with Python and Bash for recon and workflow automation
  • 🚩 Grinding CTFs on Hack The Box and TryHackMe
  • 📫 Reach me on X / Twitter ·

🛠️ Tools & Arsenal

🧠 Beyond the Terminal

When I'm not knee-deep in scope files and request/response pairs:

  • ♟️ Chess — wanna chess with me ? Lichess
  • 🥊 Boxing — sick with it
  • 🎮 Story-driven gaming — The Witcher 3, Red Dead Redemption 2 — if the story's good, I'm in
  • 📚 Reading — always got something in hand
  • 🏃 Running — clears the head between sessions

Finding what others miss, pay attention to details.

Popular repositories Loading

  1. SecLists SecLists Public

    Forked from danielmiessler/SecLists

    SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

    PHP 1

  2. bounty-targets-data bounty-targets-data Public

    Forked from arkadiyt/bounty-targets-data

    This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

    1

  3. Awesome-WAF Awesome-WAF Public

    Forked from 0xInfection/Awesome-WAF

    Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

    Python 1

  4. YoutubeDownloader YoutubeDownloader Public

    Forked from Tyrrrz/YoutubeDownloader

    Downloads videos and playlists from YouTube

    C# 1

  5. keyhacks keyhacks Public

    Forked from streaak/keyhacks

    Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

    1

  6. Mini-Python-Projects Mini-Python-Projects Public

    Python Projects for beginners