Raghubir Mahato — Security Researcher & Full-Stack Web Developer based in Kathmandu, Nepal. Founder of HackDev.
I'm Raghubir Mahato, a security researcher and full-stack web developer based in Kathmandu, Nepal. I build HackDev, an open-source suite of penetration-testing, recon, and blue-team tools in Python and Go — and on the application side, I design and ship full-stack web products (React/TypeScript front ends, Node.js APIs, PostgreSQL data layers) end to end, from database schema to deployed UI. I like working across that whole stack: the same instinct for "how would this break" that drives the security tooling also shapes how I build and harden the web apps themselves.
🔮 Founder of HackDev — a growing open-source suite of penetration-testing, recon, and blue-team tools
💻 Web developer — full-stack apps with React, TypeScript, Node.js, and PostgreSQL (see Good Health AI)
🛰️ Security focus — network & web recon, vulnerability scanning, credential security, threat intelligence, ML-assisted detection
🤖 Exploring — AI-assisted tooling: automated triage, adaptive payload generation, phishing/anomaly detection
📍 Kathmandu, Nepal · 📫 raghubirrajmahato15@gmail.com
Languages:
Web & Frameworks:
Data & ML:
Tools & Infra:
| Tool | Category | What it does |
|---|---|---|
| 🔎 HackDev-PortScanner | Network Recon |
Async TCP/UDP port scanner, banner grabbing, service fingerprinting |
| 🌐 HackDev-SubEnum | Recon |
Passive + active subdomain enumeration, takeover detection |
| 🛡️ HackDev-WebScan | Web AppSec |
XSS, SQLi, SSTI, open-redirect & header vulnerability scanner |
| 📂 HackDev-DirBuster | Web AppSec |
Concurrent directory/file brute-forcer with smart filtering |
| 🔑 HackDev-PassAudit | Credential Security |
Password strength auditor, hash identifier & cracker |
| 🎣 HackDev-PhishGuard | Threat Detection |
Heuristic + ML phishing URL detector |
| 📊 HackDev-LogSentinel | Blue Team |
ML-based log anomaly & intrusion detector |
| 📡 HackDev-NetSniff | Network Analysis |
Live packet sniffer & traffic analyzer |
| 🧬 HackDev-CVEWatch | Threat Intel |
CVE feed monitor with EPSS/KEV-aware alerting |
| 🔐 HackDev-Vault | Cryptography |
Encrypted CLI password manager (AES-256-GCM) |
| 🔓 HackDev-Password-Cracker | Credential Security |
Multi-threaded RAR/ZIP/7Z password cracker with hardware acceleration & smart hint engine |
| 🧠 HackDev_AI | AI Security |
Enterprise AI-assisted vulnerability scanner |
| 🧩 HackDev-LeakGuard | Browser Extension |
Chrome extension warning of breached/leaked passwords on login/signup/reset pages |
| Project | Stack | What it does |
|---|---|---|
| 🏥 Good Health AI | React 19 · TypeScript · Node.js · PostgreSQL · Tailwind · Gemini AI | Full-stack healthcare platform: AI health analysis, doctor discovery, appointment booking |
HackDev — open-source security tooling, built in public. ⭐ Star a repo, open an issue, or send a PR.