Skip to content
View 0xSHAK1B's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report 0xSHAK1B

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
0xSHAK1B/README.md
Muhammad Shakib

MUHAMMAD SHAKIB

Mobile Reverse Engineer · Private API Builder · Full-Stack Developer

I break into the apps that don't want to be broken into — and turn what's inside into APIs, automation, and products you can actually ship.


Telegram GitHub Facebook

Profile views Available


👋 About Me

Reverse engineer. Backend developer. Problem solver.

I take apart the mobile apps that were built not to be taken apart — Facebook, Instagram, Threads, Business suite, fintech, marketplaces — and turn what's inside into clean, working software for businesses that need it.


🎯 What I Can Do For You

🔓 Bypass Mobile App Protections

Even hardened apps with modern defenses.

  • ✅ Root & Jailbreak detection bypass
  • ✅ Anti-tamper & anti-debug bypass
  • ✅ Anti-Frida / anti-hook bypass
  • ✅ SSL Pinning bypass — iOS & Android
  • ✅ Signature & integrity check bypass
  • ✅ Custom Frida / Objection scripts

🔌 Private API Extraction

If an app doesn't ship a public API — I'll build you one.

  • ✅ Any mobile app — Facebook, Instagram, Threads, Business Suite, and more
  • ✅ Post, comment, react, message & moderate — programmatic control at scale
  • ✅ Marketplace & listing scrapers — product, price, location, images
  • ✅ Search, feed & profile data extraction
  • ✅ Session, token & signature replication done right
  • ✅ Rate-limit aware clients with proxy rotation & retries
  • ✅ Long-term maintenance when the target app updates

🎬 Full Product Development

I don't just deliver scripts — I ship products.

  • ✅ Anime streaming platform — built end-to-end
  • ✅ REST APIs in Python (FastAPI / Flask) & Node.js
  • ✅ Responsive websites — fast, modern, no templates
  • ✅ Adaptive video streaming (HLS / DASH)

🛡️ App Security Audits

Understand what your app — or your competitor's — actually does.

  • ✅ Behavioral analysis — what data goes where
  • ✅ Traffic inspection reports with full endpoint maps
  • ✅ Pre-launch security audits for your own apps
  • ✅ Competitor research — how they solved it
  • ✅ Compliance & data-flow documentation

📱 Apps I've Successfully Instrumented

Facebook · Instagram · Threads · Meta Business Suite · Messenger · WhatsApp TikTok · TikTok Lite · Snapchat · VKontakte · X (Twitter) Exness · PayPal · AliExpress · eBay

…and dozens more across social, fintech, e-commerce, and streaming.


🚀 Recent Projects

Project What it does
🎬 Anime Streaming Platform Full end-to-end streaming site — catalog, player, adaptive video, and backend, all built from scratch.
🛒 Facebook Marketplace API Structured extraction of product name, price, location, seller, and images at scale.
💬 Post, Comment & React API Programmatic publishing, reacting, and moderation across social platforms.
🔐 Hardened App Bypass Suite Anti-tamper, anti-Frida, root detection, and SSL pinning bypass on Android & iOS.

🤝 How We'll Work Together

1. You describe the target and outcome. An app, a data flow, a product idea. 2. I tell you if it's possible — usually within a few hours — with a timeline and price. 3. I deliver working code, not reports. With docs, examples, and support.

I take work on private API access, hardened app research, traffic reversing, and custom backends / products built around them.


📬 Have a project? Let's talk.

I usually reply within a few hours.

Start a conversation on Telegram


📬 Telegram  ·  💻 GitHub  ·  📘 Facebook


⭐ If any of my work helped you, consider starring my repos.

Pinned Loading

  1. Facebook-SSL-Pinning-Bypass Facebook-SSL-Pinning-Bypass Public

    Bypass Facebook SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite, mitmproxy & Reqable (2026).

    19 7

  2. Meta-Business-Suite-SSL-Pinning-Bypass Meta-Business-Suite-SSL-Pinning-Bypass Public

    Bypass Meta Business Suite SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite & mitmproxy (2026).

    14 3

  3. Messenger-SSL-Pinning-Bypass Messenger-SSL-Pinning-Bypass Public

    Bypass Facebook Messenger SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite & mitmproxy (2026).

    Shell 12 3

  4. Threads-SSL-Pinning-Bypass Threads-SSL-Pinning-Bypass Public

    Bypass Threads (Instagram) SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite & mitmproxy (2026).

    16 3

  5. Instagram-SSL-Pinning-Bypass Instagram-SSL-Pinning-Bypass Public

    Bypass Instagram SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite & mitmproxy (2026).

    19 2