Skip to content
View web-hacker-team's full-sized avatar
1 follower · 0 following

Block or report web-hacker-team

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
web-hacker-team/README.md
Matrix Rain Banner

WEB HACKER TEAM

$ whoami
>> Cybersecurity Research Collective | Est. 2024
>> We break things to make them stronger.

Important

If you specialize in Web / Binary / IoT vulnerability discovery, reach out to us via the email below. Currently, our team consists of two members: Searat and Izut. We welcome your joining our team.

📡 MISSION BRIEFING

🔓 Click to collapse | Our Research Focus
Domain Focus Areas Threat Level
🌐 Web Applications SQL Injection · XSS · SSRF · Deserialization █████████░ CRITICAL
💾 Binary / IoT Buffer Overflow · Command Injection · Privilege Escalation ████████░░ HIGH
☁️ Cloud / Network Devices NAS Vulnerabilities · Firewall Bypass · DoS ███████░░░ ELEVATED

We focus on zero-day vulnerability discovery and security research, having reported 22+ CVEs to vendors including QNAP, Synology, and more.

🧬 TECH DNA

🧠 Vulnerability Research ⚔️ Penetration Testing 🔬 Reverse Engineering ☁️ Cloud Security
IDA Pro Burp Suite Ghidra Kubernetes
GDB / WinDbg Metasploit Frida Docker
CodeQL Nmap / Masscan dnSpy AWS / Azure

Our CVEs

Click to collapse | View All Vulnerability Records (22 Total)
CVE ID Vulnerability Type Affected Product Severity
CVE Arbitrary File Read gaizhenbiao/chuanhuchatgpt 🔴
CVE Cross-Site Scripting imartinez/privategpt 🟡
CVE Cross-Site Scripting Photo Station 🟢
CVE CRLF Injection QuTS hero 🟡
CVE Cross-Site Scripting License Center 🟡
CVE CRLF Injection QuTS hero 🟡
CVE SQL Injection Video Station 🔴
CVE Buffer Overflow QNAP OS 🔴
CVE Command Injection QNAP OS 🔴
CVE Format String Qsync Central 🟡
CVE Denial of Service Qsync Central 🟡
CVE Command Injection QNAP OS 🔴
CVE Buffer Overflow QNAP OS 🔴
CVE Denial of Service BurpAPIFinder v2.0.2 🔴
CVE Denial of Service Qsync Central 🟡
CVE Buffer Overflow Qsync Central 🔴
CVE Buffer Overflow Qsync Central 🔴
CVE Buffer Overflow Qsync Central 🔴
CVE Forced Browsing Synology DSM 🟡
CVE Path Traversal Synology DSM 🟡
CVE Cross-Site Scripting emlog/emlog 🟡
CVE Local File Inclusion emlog/emlog 🔴
CVE Path Traversal YOURLS 🟢

📊 THREAT ANALYTICS

📈 Click to collapse | View Vulnerability Statistics

Severity Distribution

pie title CVE Severity Distribution
    "🔴 High (12)" : 12
    "🟡 Medium (9)" : 9
    "🟢 Low (2)" : 2
Loading

Top 5 Affected Products

xychart-beta
    title "Affected Products"
    x-axis ["Qsync Central", "QNAP OS", "QuTS hero", "emlog/emlog", "Synology DSM"]
    y-axis "CVE Count" 0 --> 6
    bar [5, 4, 2, 2, 2]
Loading

📬 CONTACT

📧 E-mail 🐙 GitHub
web_hacker@163.com @Web-Hacker-Team

Popular repositories Loading

  1. web-hacker-team web-hacker-team Public

  2. CVE CVE Public

    CVE