Skip to content
View Red-Killer's full-sized avatar
🖥️
Coding
🖥️
Coding
11 followers · 0 following

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Highlights

Organizations

@spinshield-org @managedcasino @Jackblack-io

Block or report Red-Killer

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Please don't include any personal information such as legal names or email addresses. Maximum 100 characters, markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Red-Killer/README.md

Vulnerabilities I've Discovered

Company & Exploit Vulnerability Type
ChatGPT – User Data Leak CWE-200: Exposure of Sensitive Information
Roblox (Guilded.gg) – Staff Account Takeover CWE-269: Improper Privilege Management
UberEats – Unauthorized Uber One Benefits CWE-840: Business Logic Errors
Revolut – Monthly Limit Bypass CWE-284: Improper Access Control
Squarespace – Partial Domain Hijacking CWE-302: Authentication Bypass by Assumed-Immutable Data
Embed Generator – Validation Bypass CWE-602: Client-Side Enforcement of Server-Side Security
RustyRocket.gg – Unauthorized Message Deletion CWE-285: Improper Authorization
RBLXRoll.com – Cross-Site Scripting (XSS) CWE-79: Improper Neutralization of Input During Web Page Generation (XSS)
Skytest.de – Price Manipulation CWE-20: Improper Input Validation

💻 Tech Stack:

C# C++ C TypeScript Windows Terminal PHP Markdown HTML5 JavaScript Lua PowerShell Shell Script AWS Azure Cloudflare Heroku Vercel .Net Bootstrap Chart.js Express.js Expo jQuery JWT MUI NPM Next JS NodeJS Nodemon React React Hook Form Socket.io Apache Nginx MariaDB MongoDB MySQL AmazonDynamoDB Postgres SQLite Adobe Cisco Postman Raspberry Pi TOR

📊 GitHub Stats:



Popular repositories Loading

  1. lb-musicapp lb-musicapp Public

    Let your players listen to nearly any YouTube music using a URL.

    HTML 8 3

  2. Freelancer.com-VPOD Freelancer.com-VPOD Public

    This extension will allow you to view informations about the project clients on freelancer.com

    JavaScript 2 2

  3. UrlProfiler-Licence-Generator UrlProfiler-Licence-Generator Public

    A Licence Generator for UrlProfiler by using the API. So you can get UrlProfiler for free.

    PHP 1 1

  4. kc-unicorn kc-unicorn Public

    Forked from clementinise/kc-unicorn

    Bring life & interactions to the Unicorn Club

    Lua 1

  5. rk_immigration rk_immigration Public

    Adds a Immigration System to your ESX Server

    Lua 1

  6. Red-Killer Red-Killer Public

    Config files for my GitHub profile.