Skip to content
View JavierOlmedo's full-sized avatar
🕵️‍♀️
Researching!!
🕵️‍♀️
Researching!!
265 followers · 343 following

Achievements

Achievement: Starstruckx3Achievement: Pull SharkAchievement: Arctic Code Vault Contributor

Achievements

Achievement: Starstruckx3Achievement: Pull SharkAchievement: Arctic Code Vault Contributor

Highlights

  • Pro

Block or report JavierOlmedo

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
JavierOlmedo/README.md

Typing SVG

Author of Hackpuntes Blog  |  Cybersecurity Enthusiast  |  CTF Player  |  🌏 Toledo, Spain

Hack The Box Profile    Github Pages - Javier Olmedo

🎓 Certifications

OSCP OSWE OSEP CRTO CNSS

🛠️ Skills

🐞 Penetration Testing 🔧 Hacking Tools 👨🏻‍💻 Programming 🌐 Web Development
✅ Web Application ✅ Burp Suite ✅ Python ✅ HTML, CSS, JS
✅ Reversing APK ✅ Nmap ✅ Golang ✅ PHP
✅ Linux / Windows ✅ Nessus ✅ C# / PowerShell ✅ Vue.js

🔐 My CVEs

CVE Name CVSS3 CVSS2 ExploitDB
CVE-2018-13832 All In One Favicon <= 4.6 - Multiple Stored Authenticated XSS 4.8 MEDIUM 🟠 3.5 LOW 🟢 ✅
CVE-2018-14430 Multi Step Form <= 1.2.5 - Multiple Unauthenticated Reflected XSS 6.1 MEDIUM 🟠 4.3 MEDIUM 🟠 ❌
CVE-2018-15571 Export Users to CSV <= 1.1.1 - CSV Injection 8.6 HIGH 🔴 6.8 MEDIUM 🟠 ✅
CVE-2018-15873 Sentrifugo HRMS 3.2 - Blind SQL Injection 9.8 CRITICAL 🟣 7.5 HIGH 🔴 ✅
CVE-2018-15917 Jorani Leave Management System 0.6.5 - Stored XSS 5.4 MEDIUM 🟠 3.5 LOW 🟢 ✅
CVE-2018-15918 Jorani Leave Management System 0.6.5 - SQL Injection 5.4 MEDIUM 🟠 5.5 MEDIUM 🟠 ✅
CVE-2018-18478 Libre Network Monitoring System 1.43 - Stored XSS 6.1 MEDIUM 🟠 4.3 MEDIUM 🟠 ❌
CVE-2018-18921 PHP Server Monitor 3.3.1 - CSRF 6.5 MEDIUM 🟠 5.8 MEDIUM 🟠 ✅
CVE-2018-18922 Ticketly 1.0 - Privilege Escalation 9.8 CRITICAL 🟣 5.0 MEDIUM 🟠 ✅
CVE-2018-18923 Ticketly 1.0 - Multiple SQL Injection 9.8 CRITICAL 🟣 7.5 HIGH 🔴 ✅
CVE-2018-19828 Integria IMS 5.0.83 - XSS 6.1 MEDIUM 🟠 4.3 MEDIUM 🟠 ✅
CVE-2018-19829 Integria IMS 5.0.83 - CSRF 6.5 MEDIUM 🟠 5.8 MEDIUM 🟠 ✅
CVE-2019-7400 Rukovoditel ERP & CRM 2.4.1 - XSS 6.1 MEDIUM 🟠 4.3 MEDIUM 🟠 ✅
CVE-2019-15092 Import Export WordPress Users 1.3.1 - CSV Injection 7.3 HIGH 🔴 6.0 MEDIUM 🟠 ✅
CVE-2019-19031 Easy XML Editor <= 1.7.8 - XXE Injection 8.1 HIGH 🔴 5.5 MEDIUM 🟠 ✅
CVE-2019-19032 XMLBlueprint <= 16.191112 - XXE Injection 8.1 HIGH 🔴 5.5 MEDIUM 🟠 ✅
CVE-2020-9038 Joplin through 1.0.184 - Arbitrary File Read via XSS 5.4 MEDIUM 🟠 3.5 LOW 🟢 ❌
CVE-2021-43091 SQL Injection in yeswiki/yeswiki 7.5 HIGH 🔴 5.0 MEDIUM 🟠 ❌

📝 Latest from Hackpuntes


📊 GitHub Stats


GitHub Streak Stats

📬 Contact Me


                          



snake animation

Made with ❤️ in Spain

Pinned Loading

  1. projectdiscovery/public-bugbounty-programs projectdiscovery/public-bugbounty-programs Public

    Community curated list of public bug bounty and responsible disclosure programs.

    Go 1.3k 383

  2. shodan-filters shodan-filters Public

    A list of shodan filters

    582 124

  3. OWASP-Calculator OWASP-Calculator Public

    🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment

    HTML 162 73

  4. UltimateCMSWordlists UltimateCMSWordlists Public

    📚 An ultimate collection wordlists of the best-known CMS

    93 24

  5. ipdiscover ipdiscover Public

    🔍 A simple tool to obtain long lists of ips from domains using goroutines

    Go 26 3

  6. tmb5cg/Fifa-Autobidder tmb5cg/Fifa-Autobidder Public

    Selenium-based bot that autobids and autobuys players on FIFA 23 Ultimate Team's transfer market

    Python 147 45