security researcher
r00t26
Security Engineer.
Researcher.
Builder.
I do offensive security work, develop tools, and document everything worth documenting.
~/$ whoami
security engineer · researcher · perpetual tinkerer
~/$ cat interests.txt
web exploitation, linux exploitation, reverse engineering, osint
~/$ ls -la ./certs
Security+, Pentest+, CEH, CISSP
~/$ _
CVE-2026-32746
A breakdown of CVE-2026-32746, a CVSS 9.8 unauthenticated pre-auth RCE in GNU inetutils telnetd c...
Cap
IDOR vulnerability on a security dashboard exposes a pcap containing plaintext FTP credentials, l...
Ni8mare — CVE-2026-21858
A breakdown of CVE-2026-21858, a CVSS 10.0 unauthenticated RCE vulnerability in n8n caused by Con...
Pwning the Protector — CVE-2025-69258
A breakdown of CVE-2025-69258, an unauthenticated RCE vulnerability in Trend Micro Apex Central c...
React2Shell — CVE-2025-55182
A breakdown of CVE-2025-55182, a CVSS 10.0 unauthenticated RCE vulnerability.
WSUS RCE — CVE-2025-59287
A breakdown of CVE-2025-59287, a CVSS 9.8 unauthenticated RCE vulnerability in Windows Server Upd...
nightmare
Linux privilege escalation enumeration with AI-powered triage. Find the path to root — fast.
subhunt
Async subdomain bruteforcer with wildcard DNS detection to cut down on false positives. Fast, cle...
portknock
Async port knocking tool with post-knock scanning and banner grabbing.
ipcheck
A simple CLI based utility that can check the reputation of IPs using the AbuseIPDB API.