Skip to content
View JavierOlmedo's full-sized avatar
🕵️‍♀️
Researching!!
🕵️‍♀️
Researching!!
266 followers · 342 following

Achievements

Achievement: Starstruckx3Achievement: Pull SharkAchievement: Arctic Code Vault Contributor

Achievements

Achievement: Starstruckx3Achievement: Pull SharkAchievement: Arctic Code Vault Contributor

Highlights

  • Pro

Block or report JavierOlmedo

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
JavierOlmedo/README.md

Typing SVG


About Me

🧑‍💻 Who am I?

🏷️ Name: Javier Olmedo

📍 Location: Toledo, Spain 🇪🇸 UTC+01:00

💼 Role: Penetration Tester

🎓 Certs: OSCP · OSWE · OSEP · CRTO

⚡ Fun Fact: 18 CVEs published and still hunting...

💡 What I do?

🔐 Web Application Penetration Testing

🏴 CTF Player at Hack The Box

🐛 Security Research & CVE Discovery

✍️ Blogging at Hackpuntes.com

🛡️ Red Team & Active Directory Attacks

🚀 Currently

🔭 Writing CTF WriteUps on Hackpuntes.com  •  🌱 Researching Active Directory & Red Team techniques  •  💬 Ask me about Web Pentesting, Python, Exploit Development  •  🎯 Goal: Make cybersecurity knowledge accessible to everyone

🎓 Certifications

GitHub Trophies

Trophies

🛠️ Skills

🐞 Penetration Testing 🔧 Hacking Tools 👨🏻‍💻 Programming 🌐 Web Development
✅ Web Application ✅ Burp Suite ✅ Python ✅ HTML, CSS, JS
✅ Reversing APK ✅ Nmap ✅ Golang ✅ PHP
✅ Linux / Windows ✅ Nessus ✅ C# / PowerShell ✅ Vue.js

🔐 My CVEs

CVE Name CVSS3 CVSS2 ExploitDB
CVE-2018-13832 All In One Favicon <= 4.6 - Multiple Stored Authenticated XSS 4.8 MEDIUM 🟠 3.5 LOW 🟢 ✅
CVE-2018-14430 Multi Step Form <= 1.2.5 - Multiple Unauthenticated Reflected XSS 6.1 MEDIUM 🟠 4.3 MEDIUM 🟠 ❌
CVE-2018-15571 Export Users to CSV <= 1.1.1 - CSV Injection 8.6 HIGH 🔴 6.8 MEDIUM 🟠 ✅
CVE-2018-15873 Sentrifugo HRMS 3.2 - Blind SQL Injection 9.8 CRITICAL 🟣 7.5 HIGH 🔴 ✅
CVE-2018-15917 Jorani Leave Management System 0.6.5 - Stored XSS 5.4 MEDIUM 🟠 3.5 LOW 🟢 ✅
CVE-2018-15918 Jorani Leave Management System 0.6.5 - SQL Injection 5.4 MEDIUM 🟠 5.5 MEDIUM 🟠 ✅
CVE-2018-18478 Libre Network Monitoring System 1.43 - Stored XSS 6.1 MEDIUM 🟠 4.3 MEDIUM 🟠 ❌
CVE-2018-18921 PHP Server Monitor 3.3.1 - CSRF 6.5 MEDIUM 🟠 5.8 MEDIUM 🟠 ✅
CVE-2018-18922 Ticketly 1.0 - Privilege Escalation 9.8 CRITICAL 🟣 5.0 MEDIUM 🟠 ✅
CVE-2018-18923 Ticketly 1.0 - Multiple SQL Injection 9.8 CRITICAL 🟣 7.5 HIGH 🔴 ✅
CVE-2018-19828 Integria IMS 5.0.83 - XSS 6.1 MEDIUM 🟠 4.3 MEDIUM 🟠 ✅
CVE-2018-19829 Integria IMS 5.0.83 - CSRF 6.5 MEDIUM 🟠 5.8 MEDIUM 🟠 ✅
CVE-2019-7400 Rukovoditel ERP & CRM 2.4.1 - XSS 6.1 MEDIUM 🟠 4.3 MEDIUM 🟠 ✅
CVE-2019-15092 Import Export WordPress Users 1.3.1 - CSV Injection 7.3 HIGH 🔴 6.0 MEDIUM 🟠 ✅
CVE-2019-19031 Easy XML Editor <= 1.7.8 - XXE Injection 8.1 HIGH 🔴 5.5 MEDIUM 🟠 ✅
CVE-2019-19032 XMLBlueprint <= 16.191112 - XXE Injection 8.1 HIGH 🔴 5.5 MEDIUM 🟠 ✅
CVE-2020-9038 Joplin through 1.0.184 - Arbitrary File Read via XSS 5.4 MEDIUM 🟠 3.5 LOW 🟢 ❌
CVE-2021-43091 SQL Injection in yeswiki/yeswiki 7.5 HIGH 🔴 5.0 MEDIUM 🟠 ❌

📝 Latest from Hackpuntes

📊 GitHub Stats

GitHub Stats Streak Stats
Top Languages

Profile Summary

Profile Details
Repos per Language Most Commit Language Productive Time

📬 Contact Me


                          



snake animation

Profile Views


Made with ❤️ in Spain

Pinned Loading

  1. projectdiscovery/public-bugbounty-programs projectdiscovery/public-bugbounty-programs Public

    Community curated list of public bug bounty and responsible disclosure programs.

    Go 1.3k 385

  2. shodan-filters shodan-filters Public

    A list of shodan filters

    584 124

  3. OWASP-Calculator OWASP-Calculator Public

    🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment

    HTML 162 73

  4. UltimateCMSWordlists UltimateCMSWordlists Public

    📚 An ultimate collection wordlists of the best-known CMS

    94 25

  5. ipdiscover ipdiscover Public

    🔍 A simple tool to obtain long lists of ips from domains using goroutines

    Go 26 3

  6. tmb5cg/Fifa-Autobidder tmb5cg/Fifa-Autobidder Public

    Selenium-based bot that autobids and autobuys players on FIFA 23 Ultimate Team's transfer market

    Python 147 45