Skip to content

Instantly share code, notes, and snippets.

View sharafdin's full-sized avatar
:shipit:
"From Sand Trekker to Cyber Visionary"

Sharafdin Yusuf sharafdin

:shipit:
"From Sand Trekker to Cyber Visionary"
784 followers · 7 following
View GitHub Profile
@sharafdin
sharafdin / cybersecurity-defense-offense-roadmap.md
Created June 28, 2026 09:48
A comprehensive cybersecurity roadmap covering essential IT foundations, core security concepts, and specialized learning paths for both Blue Team defenders and Red Team ethical hackers.

Cybersecurity Defense & Offense Roadmap

Phase 1: The Shared Foundation

Every security professional must start here. You can choose to attack or defend. You cannot protect or exploit a system if you do not fully understand it.

1. Learn IT Fundamentals

  • Computer Hardware & Operating Systems
  • Virtual Machines & File Systems
@sharafdin
sharafdin / Broken Access Control.md
Created March 31, 2026 03:00
Complete guide to broken access control, IDOR, privilege escalation, testing methods, and prevention checklist.

Lesson: Broken Access Control

Lesson Agenda

  • What is Broken Access Control?
  • Types of Vulnerabilities and Essential Labs
  • How to Find and Exploit Vulnerabilities
  • Prevention and Audit Checklistl
@sharafdin
sharafdin / AI Web App Security Checklist: From Pentest Bugs to Agentic Repo Auditing.md
Last active June 25, 2026 09:59
A complete hands-on guide to securing AI-generated web apps. Learn the most common vulnerabilities developers ship during vibe coding, then use Antigravity Skills, and YoAuditor to audit and patch an intentionally vulnerable AI Web Apps.

AI tools and vibe coding are everywhere right now. Developers build applications very fast. I do web application pentesting. I see many recurring security mistakes because of this speed. I made this security checklist. Every developer must check these points before releasing an app. It helps reduce security risks.

We will secure an AI-generated website. First, we need to talk about these common security bugs.

1. Secrets and Configuration Security

  • Do not write API keys or tokens directly in the code.
  • Make sure secrets do not show in logs, error messages, or API responses.
@sharafdin
sharafdin / Cryptography.md
Created January 21, 2026 10:48
A comprehensive journey through the art and science of securing digital information.

Cryptography: A Complete Deep Dive Course

From Zero to Mastery — A comprehensive journey through the art and science of securing digital information.

Course Overview

Welcome to this complete cryptography course. By the end, you will understand:

@sharafdin
sharafdin / AI Won’t Replace Engineers — It Replaces “Just Coding”.md
Created January 18, 2026 15:09
AI replaces “just coding,” not software engineering — a breakdown of SDLC, systems, and responsibility.

📘 AI Writes Code Faster Than You. Here's Why That Doesn't Matter.

Everyone is asking the wrong question.

They're asking: "Will AI replace software engineers?"

But the real question is: "What is software engineering, actually?"

Spoiler: It was never about typing code.

@sharafdin
sharafdin / main.sop
Last active May 2, 2025 23:53
Soplang Sample: Functions, Variables, and Conditionals
# **Soplang Sample: Functions, Variables, and Conditionals**
# 1. Variable Declaration
door x = 10
qor("Qiimaha x waa: " + x)
# 2. Conditional Logic
haddii (x > 5) {
qor("x wuxuu ka weyn yahay 5")
} haddii_kale (x == 5) {
@sharafdin
sharafdin / .gitignore
Created February 20, 2024 12:14
.gitignore-templates
### AL ###
#Template for AL projects for Dynamics 365 Business Central
#launch.json folder
.vscode/
#Cache folder
.alcache/
#Symbols folder
.alpackages/
#Snapshots folder
.snapshots/