Mobbo Security Research

This repository contains public, defensive security materials for Mobbo and Big Data Technologies Ltd. It is intended to document authorized security work, responsible disclosure expectations, and reusable security engineering templates.

Scope

This repository covers defensive work for:

• Mobbo.com and Mobbo-owned services
• Repositories owned by the Mobbo-com GitHub organization
• Infrastructure operated by Big Data Technologies Ltd.
• Third-party programs only when the exact official bounty or disclosure scope gives written authorization

This repository does not authorize testing against unrelated third-party systems.

Security Contact

Preferred security contact: security@mobbo.com

If that address is not reachable, contact Ofir Kris through the verified GitHub organization owner account.

What We Publish Here

• Responsible disclosure policy
• Authorized security research policy
• AI-assisted defensive security usage policy
• Security review checklists
• Vulnerability writeup and remediation templates
• Sanitized internal hardening writeups when safe to publish

Boundaries

All research must be lawful, authorized, and remediation-focused. Do not use this repository for malware, phishing, credential theft, persistence, evasion, botnets, destructive testing, denial-of-service, unauthorized scanning, unauthorized exploitation, or data exfiltration.

Key Links

• Security policy
• Responsible disclosure policy
• Authorized research and AI usage policy
• Vendor bounty workflow
• Writeup template
• Security checklists