// 01[ RED TEAM TOOL ]
D3adphish
GoPhish fork engineered to strip every detectable fingerprint — X-Mailer headers, tracking params, session cookies, server identifiers. One binary, zero traces. For authorized engagements only.
GoGoPhishSQLiteLinux
// BUG BOUNTY HUNTER · RED TEAM
EVERY
SYSTEM
BLEEDS.
No system is clean. I find what's broken before the adversary does, across four active bug bounty platforms.
01 / 060Platforms Active
0+Years Operational
02 / 06
TOOLS & PROJECTS
// 02[ RECON SUITE ]
OwlSec Tool
Terminal-based recon suite built for the OwlSec community. WHOIS lookups, three Nmap scan profiles, passive/active subdomain enumeration via Subfinder & Amass, live host detection with HTTPX, and JS secret extraction — all from one interactive menu.
Python 3NmapSubfinderAmassHTTPX
03 / 06
CAPABILITIES
// 01
Web App Pentesting
Full-scope web application assessments targeting authentication, authorization, and business logic , the bugs that scanners miss.
- IDOR chain exploitation
- Business logic bypass
- SSRF & blind SSRF
- Stored & DOM XSS
- HTTP request smuggling
- File upload bypass
- Insecure deserialization
- Race condition attacks
- JWT algorithm confusion
// 02
Social Engineering
Human-layer attack simulation. Pretexting, persona building, and OSINT-driven targeting to expose the weakest link in any organization.
- Pretexting & persona building
- OSINT-driven targeting
- Vishing simulation
- Authority & urgency manipulation
- Callback phishing
- LinkedIn reconnaissance
- Physical security bypass
- USB drop campaigns
- Impersonation attacks
- Trust exploitation chains
// 03
Phishing Campaign Specialist
End-to-end phishing simulation using D3adphish , fingerprint-stripped, fully authorized, and built to test real-world defences.
- D3adphish framework deployment
- Domain spoofing & typosquatting
- Evasion of email security filters
- SSL certs for phishing domains
- Credential harvesting pipelines
- Template design & A/B testing
- Tracking & open-rate metrics
- Spear phishing campaigns
- GoPhish hardening
- Post-campaign reporting
04 / 06
THE LOADOUT
Burp Suite Pro
AI Pipelines
OSINT Collection
Burp Suite Pro
AI Pipelines
OSINT Collection
Burp Suite Pro
AI Pipelines
OSINT Collection
Burp Suite Pro
AI Pipelines
OSINT Collection
05 / 06
INITIATE CONTACT
Found something I should know about? Let's talk. Bug bounty collabs, red team engagements, OwlSec community, or just a good recon story.
Instagram@d3adshotsec
Open Instagram →DMs open. Best for quick questions, collabs, and community stuff.
OwlSecdiscord.gg/wsAUykps
Open OwlSec →Ethical hacking communities, threat intel, learning, and mentoring for every level.
AmberNodediscord.gg/43A9c78a
Open AmberNode →Ethical hacking communities, threat intel, learning, and mentoring for every level.
// OPERATORD3ADSHOT
OPERATIONAL