Skip to content
View Raunaksplanet's full-sized avatar
🐢
Developing Security Tools in Large Ocean of Bug-Bounty
🐢
Developing Security Tools in Large Ocean of Bug-Bounty
273 followers · 47 following

Achievements

Achievement: Pair ExtraordinaireAchievement: Starstruckx3Achievement: YOLOAchievement: QuickdrawAchievement: Pull Shark

Achievements

Achievement: Pair ExtraordinaireAchievement: Starstruckx3Achievement: YOLOAchievement: QuickdrawAchievement: Pull Shark

Block or report Raunaksplanet

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Raunaksplanet/README.md

Typing SVG

Banner

LinkedIn Twitter/X GitHub Medium YouTube YesWeHack HackerOne Discord Portfolio Udemy

🧠 About Me

whoami
> Raunak Gupta  a.k.a.  B1scuit
> Freelance Security Researcher & Bug Bounty Hunter
> Specializing in: Android • Web • API • Thick-Client Security
> Also into: Open-Source • AI • LLMs
> Location: Rajasthan, India
> Status: Available for hire 🟢
  • 🎯 Bug Bounty Hunter on HackerOne & YesWeHack — featured in 18+ Hall of Fames
  • 🛠️ Building open-source security tools for the community
  • 📹 Running B1scuit Security on YouTube — hacking tutorials & writeups
  • ✍️ Writing on Medium — bug bounty tips, resources & POCs
  • 🎓 Udemy instructor with 8,400+ learners
  • 💬 Running an active Discord community for security researchers
  • 🌐 Personal site: b1scuit.pro

🏆 Hall of Fame — Acknowledged By

Company Severity Vulnerability Type
🔵 Supabase 🔴 High BAC + Insecure API (rate limiting & input flaws)
🟠 Zerodha 🔴 High Android + Business Logic + Security Misconfigurations
⚫ Cert-wm.nl 🔴 High Stored XSS via Unrestricted File Upload
🟣 Thinkst Canary 🟡 Medium Mass PII Leak
🟢 Substack 🟡 Medium Race Condition — Atomic Increment Manipulation
🟢 GeeksForGeeks 🟡 Medium Mass Assignment Vulnerability
🔵 Wibmo.com 🟡 Medium IDOR — Email Disclosure
🟠 EC-Council 🟡 Medium Email Verification Bypass
🟤 Inflectra.com 🟡 Medium Open Redirect + PII Leak via Input Validation Flaw
🟣 Skillmate.ai 🟡 Medium Security Bypass + Insecure API
🔵 Samsung 🔵 Low Misconfigured AWS S3 Bucket — Data Leak
♟️ Chess.com 🔵 Low CWE-657: Insecure Design Violation
🟠 Arcjet.com 🔵 Low CWE-657: Insecure Design Violation
🏥 CK Birla Hospital 🔵 Low Security Bypass + Insecure API
🏥 Sir Ganga Ram Hospital 🔵 Low Security Bypass + Insecure API
🏥 Max Healthcare 🔵 Low Security Bypass + Insecure API
🟡 Com Olho 🔵 Low Security Bypass + Insecure API
🟡 Brandmuscle.com 🔵 Low Security Bypass + Insecure API

💰 Also earned a $1,000+ bounty via private YesWeHack program (Android app — Forgot Password flow)

🚀 Featured Projects

📚 Learning & Research

Project Description Stars
My CyberSecurity Store Curated collection of infosec tools, resources & references ⭐
Bug Bounty GitBook Playbook: tools, methodologies, writeups, labs & checklists ⭐
Learn Android Bug Bounty Complete guide to Android application pentesting & bug bounty ⭐
Learn Beyond Web Comprehensive guide to Thick-Client security testing ⭐
Elite Google Dorks Search Smart Google dorks to surface hidden assets & information ⭐

🤖 Android Security Tools

Project Description
APKDig Deep APK analysis — extracts security-relevant info
analyze_manifest AndroidManifest.xml analyzer — permissions, deep links, exported components
AndroidExportViewer View & analyze exported Android components
DecompileAllAPK-s Batch APK decompiler with analysis features
PullAPKFromPure Extract APKs directly from Android devices

🌐 Web Security Tools

Project Description
Bruteforce JWT Secret Brute-force weak JWT secrets to test auth
Elite Burp Suite Analyzer Advanced HTTP history analyzer with enhanced filtering
GitHub Recon Tool GitHub recon & repo analysis tool
Tor IP Changer Auto-rotate IP via Tor network
Single Script Tools One-script installer for multiple cybersecurity tools
CloneAllRepo Clone all repos from a GitHub user/org

🔧 Burp Suite Extensions

Extension Description
AutoTabSorter Auto-organize Burp tabs for workflow efficiency
CVSS Calculator Integrated CVSS scorer inside Burp Suite

📝 Recent Blogs & POCs

🛠️ Skills & Stack

Android Burp Suite Python Frida Linux API Security OWASP Git

Target Surfaces: Web Apps • REST/GraphQL APIs • Android Apps • iOS Apps • Thick-Client Apps Techniques: IDOR • BAC • Race Conditions • Mass Assignment • SQLi • XSS • JWT Attacks • SSL Pinning Bypass • Root Detection Bypass • Business Logic Flaws • AWS Misconfigurations

📊 GitHub Stats

GitHub Stats Top Languages

GitHub Streak

🎓 Teaching

Udemy Instructor — Security Researcher and Bug Bounty Hunter

  • 📌 8,400+ total learners
  • 📌 Active courses on cybersecurity, bug bounty & ethical hacking
  • 📌 Beginner-friendly content paired with real-world examples

💬 Let's Connect

Found a bug in my README? That's... ironic. Hit me up on Discord or Twitter.

⭐ If my tools or resources helped you — drop a star. It keeps the grind going.

Profile Views

Pinned Loading

  1. My-CyberSecurity-Store My-CyberSecurity-Store Public

    This repository contains a comprehensive collection of learning resources and notes that I've gathered on various topics, including cybersecurity, bug bounty, API security, cloud security, and more…

    Rust 629 174

  2. Elite-Google-Dorks-Search-by-Biscuit Elite-Google-Dorks-Search-by-Biscuit Public

    Discover hidden information on the web with "Elite Google Dorks Search by Biscuit." This collection offers smart and improved Google search queries to help you find data and vulnerabilities more ea…

    HTML 20 8

  3. Bug-Bounty-GitBook Bug-Bounty-GitBook Public

    Biscuit's Bug Bounty Playbook is a curated hub for cybersecurity learners and bug bounty hunters. It includes tools, methodologies, writeups, vulnerable labs, YouTube channels, checklists, and plat…

    20 10

  4. Learn-android-bug-bounty Learn-android-bug-bounty Public

    Documenting all the sources from where I'm learning Mobile(adnroid/IOS) bug bounty so if another researcher want to start with mobile bug bounty he/she don't struggle for resources

    Shell 48 13

  5. Single-Script-Tools-Installation Single-Script-Tools-Installation Public

    Automating Micros

    Shell 13 7