mahmutka
- 6 skills
- 0 followers
- 1 week ago last updated
- ▌ Vulnerability Triage · mahmutka bundleTrace a security finding from source to sink, establish attack-path facts, calibrate severity with a mechanical impact x likelihood matrix, and filter false positives. Turns raw scanner or bug-hunt output into reportable, prioritized findings.
- ▌ Threat Modeling · mahmutka bundleRepository- and system-level threat modeling — trust boundaries, attacker-controlled inputs, context-relevant vulnerability classes, and severity calibration. Produces a reusable threat model that grounds later security review.
- ▌ Secure Code Review · mahmutka bundleLanguage-aware security code review covering CWE/OWASP patterns, SAST integration, and remediation guidance for Python, JS, Go, and Java.
- ▌ Security Hardening · mahmutka bundleTurn security findings into minimal validated fixes, and turn a set of findings into structural/architectural hardening proposals with before/after diagrams, tradeoffs, and a migration plan. Goes beyond per-finding patches to systemic improvement.
- ▌ Ctf Solver · mahmutka bundleCapture The Flag challenge assistant covering crypto, web, pwn, reverse engineering, and forensics with tool recommendations and solution strategies.
- ▌ Poc Development · mahmutka bundleProve a vulnerability with a runnable proof-of-concept in an isolated workspace. Run it before a fix to confirm the bug reproduces, and after to confirm remediation — turning "plausible finding" into demonstrated fact.