Mohammad Omor Faruk
Software engineer with 6+ years in backend systems and 3+ years in cybersecurity research. I build production infrastructure and find what breaks. Based in Bogura, Bangladesh.
Delivery + Security Depth
I started as a full-stack developer building production banking systems. Over time I moved deeper into cybersecurity - recon automation, vulnerability research, and application security. That mix means I understand both how software is built and how it breaks.
- B.Sc. CSE, University of Rajshahi (2018-2022)
- OSCP Coursework (PWK 3.2)
- Blue Team Junior Analyst (BJT)
- Google Foundations of Cybersecurity
- PortSwigger & TryHackMe labs
- Digital Bangladesh Award 2022 (Prime Minister's Office)
- Robotech Olympiad 2023 - Embedded Systems
- Web app recon, attack-surface mapping, manual testing
- Automation pipelines for asset discovery and vuln triage
- Malware analysis and reverse engineering
- 30+ bug bounty reports across H1, Bugcrowd, Intigriti
- Production web apps (React, Node.js, PHP, REST APIs)
- Southeast Bank Alarm Management System - end to end
- ElectronJS desktop tooling, monitoring dashboards
- Java 2D games and web projects for international clients
- $700+ earned across platforms
Stack & tooling
Languages
Backend
Frontend
Databases
Web Security
API & Auth
Advanced Attacks
Infra & Cloud
Recon & Automation
Tools
Reverse & Malware
Play Store apps
Kotlin apps built from scratch. Some published, more in development.
Full project list
Production systems, security tools, and award-winning engineering.
Southeast Bank Alarm Management
24/7 real-time monitoring for banking security infrastructure. Kotlin Android client + PHP REST API backend. Reduced manual monitoring workload by 70%.
VulnXposer
Web-based vulnerability assessment platform integrating OWASP ZAP, DNS analysis, port scanning, and structured HTML/PDF reporting.
Smart Helmet
AI-powered accident alert and rider safety system with GPS/GSM and OpenCV vehicle recognition. Digital Bangladesh Award 2022 by the Prime Minister.
Recon Automation Toolkit
Bash/Python automation for subdomain enumeration, archive URL collection, HTTP probing, and Nuclei-based vulnerability triage.
Research Notes & Workflows
Curated methodology for recon, API testing, and structured testing strategy for bug bounty hunting.
HackerOne Workflow Scripts
Python automation for HackerOne bug bounty workflows, target scope management, and reporting.
Research & articles
Published on Medium. Malware analysis, kernel internals, web security, and red team methodology.
Exploring Vulnerabilities in Modern Web Applications
Overview of common web weaknesses and practical security considerations.
Read →Kernel Mode DLL Injection Techniques
Low-level injection concepts, OS internals, and kernel-space execution.
Read →Advanced Persistent Threats and Kernel-Level Exploits
Attacker tradecraft, APT methodology, and kernel exploitation techniques.
Read →Bypassing Windows Kernel PatchGuard
Deep dive into PatchGuard bypass for exploit development workflows.
Read →Red Team Strategies and Methodologies
Offensive security approaches covering planning, execution, and reporting.
Read →Advanced Malware Injection Techniques
Analysis of sophisticated injection patterns and defensive countermeasures.
Read →Open to work
Freelance engineering, security consulting, and remote collaboration. Bangladesh-based, global hours.