My name is Vlad. I am an ethical hacker, pentester and a CTF player.
I create pentest tools and CTF tasks.
- Automatic SSTI detection tool with interactive interface
- Situational extra plugins for SSTImap
- A simple transparent HTTP proxy using Flask
- Learning IoT hacking and looking for vulns in my IP camera
- QR-based device sharing credentials leak in v380 Pro IP camera app
- Root shell accessible over UART with hardcoded password in v380 camera
- Plaintext credentials in the filesystem of the v380 camera