Skip to content
View linxploit's full-sized avatar

Highlights

  • Pro

Block or report linxploit

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
linxploit/README.md

Linxploit  ·  Portfolio  ·  Linkedin


Linxploit



I'm Mindless — Founder & CEO of Linxploit.

I build security tools. Specifically, tools that stay on the right side of a line a lot of "recon" and "pentest" scripts blur without thinking about it — every release documents exactly what it does and doesn't do, ships with an authorization gate before it touches a target, and is built to survive contact with a real engagement rather than just look good in a demo GIF.

What I focus on:

  • Designing and building the Linxploit toolkit — open-source, safe-by-design utilities for web application security testing, reconnaissance, and infrastructure assessment
  • Reading and reasoning about the internals most tools skim past — TLS handshakes, HTTP header semantics, CORS origin-validation logic, WHOIS/registry data — well enough to build something that gets the details right, not just the headline feature
  • Writing tools that are honest about their limitations: a detection is a signal for a human to review, not a verdict

How I work:

Every tool I ship starts from the same brief — solve one problem cleanly, explain exactly how it works, and never pretend a passive check is proof of anything. I'd rather release something smaller that's correct than something impressive that's wrong in a way nobody notices until it matters.

Currently: building out the Linxploit toolkit, one focused tool at a time, and open-sourcing all of it.



🔍 Web Application Security
XSS reflection analysis, CORS misconfiguration testing, upload-form attack-surface review, HTTP security header auditing.
🌐 Reconnaissance & OSINT
Directory & endpoint discovery, domain/WHOIS intelligence, technology stack fingerprinting.
🔐 TLS / PKI
Certificate inspection, protocol-support testing, key & signature strength analysis.
🛠️ Tool Development
Turning each of the above into clean, documented, open-source CLI tools others can actually rely on.


Languages & Development

python c cplusplus bash javascript nodejs html css

Platforms & Environment

linux kali docker git github vscode

Security & Offensive Tooling

burpsuite nmap wireshark metasploit shodan amass

Data & Monitoring

mysql postgresql elasticsearch wazuh


Open Source Work

A selection of tools built and released under Linxploit — each one open-source, documented, and scoped to a single problem done properly.


→ See all repositories


CTF & Achievements

TryHackMe    HackTheBox


Connect

Open an issue on any repo if you have questions about a tool — feedback and contributions are always welcome.


GitHub Stats

GitHub Streak GitHub Stats

Top Languages Chart

GitHub Trophies

Profile views    GitHub followers    linxploit visits


Pinned Loading

  1. Linxploit-sectools Linxploit-sectools Public

    Linxploit SecTools is a lightweight terminal-based security toolkit manager that centralizes 50+ offensive security tools, offering search, recommendations, and one-key installation from a single i…

    Python 1

  2. Bakra-Dash Bakra-Dash Public

    BakraDash is a production-grade social engineering framework designed for authorized penetration testing and security awareness training. It captures camera snapshots and IP addresses through convi…

    HTML

  3. cert-intel cert-intel Public

    cert-intel is a zero-noise, high-signal CLI tool that performs deep TLS certificate analysis against any domain.

    Python

  4. domain-sentinel domain-sentinel Public

    DomainSentinel queries the public WHOIS registry for a domain — the same lookup performed by the whois command, ICANN Lookup, or any registrar's "who owns this domain" page — and turns the raw resu…

    Python 1

  5. reflect-x reflect-x Public

    ReflectX is a lightweight, safe reflection-analysis tool for web parameters. It sends a unique, harmless marker string to a target parameter and checks whether — and how — that marker comes back in…

    Python 1

  6. stack-scope stack-scope Public

    StackScope sends a single, normal HTTP request to a target — the same request a browser makes — and matches the response headers and HTML against a signature database covering web servers, backend …

    Python 1