Skip to content
View 0xSHAK1B's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report 0xSHAK1B

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
0xSHAK1B/README.md
Muhammad Shakib

MUHAMMAD SHAKIB

Mobile Reverse Engineer · Private API Builder · Full-Stack Developer

I break into the apps that don't want to be broken into — and turn what's inside into APIs, automation, and products you can actually ship.


Telegram GitHub Facebook

Profile views Available


👋 About Me

Reverse engineer. Backend developer. Problem solver.

I take apart the mobile apps that were built not to be taken apart — Facebook, Instagram, Threads, Business suite, fintech, marketplaces — and turn what's inside into clean, working software for businesses that need it.


🎯 What I Can Do For You

🔓 Bypass Mobile App Protections

Even hardened apps with modern defenses.

  • Root & Jailbreak detection bypass
  • Anti-tamper & anti-debug bypass
  • Anti-Frida / anti-hook bypass
  • SSL Pinning bypass — iOS & Android
  • Signature & integrity check bypass
  • ✅ Custom Frida / Objection scripts

🔌 Private API Extraction

If an app doesn't ship a public API — I'll build you one.

  • Any mobile app — Facebook, Instagram, Threads, Business Suite, and more
  • Post, comment, react, message & moderate — programmatic control at scale
  • Marketplace & listing scrapers — product, price, location, images
  • Search, feed & profile data extraction
  • Session, token & signature replication done right
  • Rate-limit aware clients with proxy rotation & retries
  • ✅ Long-term maintenance when the target app updates

🎬 Full Product Development

I don't just deliver scripts — I ship products.

  • Anime streaming platform — built end-to-end
  • REST APIs in Python (FastAPI / Flask) & Node.js
  • Responsive websites — fast, modern, no templates
  • Adaptive video streaming (HLS / DASH)

🛡️ App Security Audits

Understand what your app — or your competitor's — actually does.

  • Behavioral analysis — what data goes where
  • Traffic inspection reports with full endpoint maps
  • Pre-launch security audits for your own apps
  • Competitor research — how they solved it
  • Compliance & data-flow documentation

📱 Apps I've Successfully Instrumented

Facebook · Instagram · Threads · Meta Business Suite · Messenger · WhatsApp TikTok · TikTok Lite · Snapchat · VKontakte · X (Twitter) Exness · PayPal · AliExpress · eBay

…and dozens more across social, fintech, e-commerce, and streaming.


🚀 Recent Projects

Project What it does
🎬 Anime Streaming Platform Full end-to-end streaming site — catalog, player, adaptive video, and backend, all built from scratch.
🛒 Facebook Marketplace API Structured extraction of product name, price, location, seller, and images at scale.
💬 Post, Comment & React API Programmatic publishing, reacting, and moderation across social platforms.
🔐 Hardened App Bypass Suite Anti-tamper, anti-Frida, root detection, and SSL pinning bypass on Android & iOS.

🤝 How We'll Work Together

1. You describe the target and outcome. An app, a data flow, a product idea. 2. I tell you if it's possible — usually within a few hours — with a timeline and price. 3. I deliver working code, not reports. With docs, examples, and support.

I take work on private API access, hardened app research, traffic reversing, and custom backends / products built around them.


📬 Have a project? Let's talk.

I usually reply within a few hours.

Start a conversation on Telegram


📬 Telegram  ·  💻 GitHub  ·  📘 Facebook


⭐ If any of my work helped you, consider starring my repos.

Pinned Loading

  1. Facebook-SSL-Pinning-Bypass Facebook-SSL-Pinning-Bypass Public

    Bypass Facebook SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite, mitmproxy & Reqable (2026).

    Shell 19 6

  2. Meta-Business-Suite-SSL-Pinning-Bypass Meta-Business-Suite-SSL-Pinning-Bypass Public

    Bypass Meta Business Suite SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite & mitmproxy (2026).

    Shell 13 3

  3. Messenger-SSL-Pinning-Bypass Messenger-SSL-Pinning-Bypass Public

    Bypass Facebook Messenger SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite & mitmproxy (2026).

    Shell 10 3

  4. Threads-SSL-Pinning-Bypass Threads-SSL-Pinning-Bypass Public

    Bypass Threads (Instagram) SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite & mitmproxy (2026).

    Shell 16 4

  5. Instagram-SSL-Pinning-Bypass Instagram-SSL-Pinning-Bypass Public

    Bypass Instagram SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite & mitmproxy (2026).

    Shell 18 1