willy.P

Seguridad Informática - Hacking - Pentester and Security Researcher

[willy.P @willyc0de]

hawktrace/CVE-2026-45504: CVE-2026-45504 Microsoft Exchange File Read · GitHub https://t.co/bG5PJs9ngi

[willy.P @willyc0de]

CVE-2025-53772 IIS WebDeploy RCE | HawkTrace https://t.co/mQPl0yMRWD

[willy.P @willyc0de]

Wh04m1001/CVE-2025-48799 LPE - Windows Update service
#redteam #privesc #pentest https://t.co/ed1wX1h5N7

[shubs @infosec_au]

How do we turn bad SSRF (blind) into good SSRF (full response)? The @assetnote Security Research team at @SLCyberSec used a novel technique involving HTTP redirect loops and incremental status codes that leaked the full HTTP resp. It may work elsewhere! https://t.co/CTSTEtKiD1

[willy.P @willyc0de]

@hackerschoice 🤣🤣🤣🤪

[willy.P @willyc0de]

rad9800/BootExecuteEDR
#redteam https://t.co/Lb3mIsxItS

[willy.P @willyc0de]

compr00t/CVE-2024-42327: PoC for CVE-2024-42327 / ZBX-25623 https://t.co/DgBObaUE6M

[willy.P @willyc0de]

varwara/CVE-2024-35250: PoC for the Untrusted Pointer Dereference in the ks.sys driver
#pentest #privesc #redteam https://t.co/deMBxxM3dw

[willy.P @willyc0de]

Getting a Havoc agent past Windows Defender (2024) | by lainkusanagi
#pentest #redteam https://t.co/fUtoJ8P7fX

[willy.P @willyc0de]

murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access: EDR & Antivirus Bypass to Gain Shell Access
#pentest #redteam https://t.co/ENUr8wFPEu

[willy.P @willyc0de]

@renniepak @Hacker0x01 congrats 💪

[willy.P @willyc0de]

sinsinology/CVE-2024-5009: Exploit for CVE-2024-5009 https://t.co/pe9Ah7aDYk

[willy.P @willyc0de]

POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.
#exploit #pentest #bugbounty https://t.co/cujsX1hyQa

[Thomas Rinsma @thomasrinsma]

Just released the write-up for CVE-2024-4367, a bug I found recently in PDF.js (and hence in Firefox), resulting in arbitrary JavaScript execution when opening a malicious PDF.
https://t.co/sex6fR0xHS

[willy.P @willyc0de]

Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core"
#hacking #pentest
https://t.co/O88f9cqHn0

[willy.P @willyc0de]

CVE-2024-27198 & CVE-2024-27199 PoC - RCE, Admin Account Creation, Enum Users, Server Information https://t.co/aFSoRgAvMZ

[willy.P @willyc0de]

HTTP Downgrade attacks with SmuggleFuzz https://t.co/B0MF7x8vtW

[willy.P @willyc0de]

GitHub - YuriiCrimson/ExploitGSM: Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5 https://t.co/n8jbHctbuE

[willy.P @willyc0de]

Some notes and tools for reverse engineering / deobfuscating / unminifying obfuscated web app code
#pentest #bugbounty https://t.co/qGf5SuA2fa

[willy.P @willyc0de]

CVE-2024-21633 - MobSF Remote code execution | QU35T blog https://t.co/eSiyPHbMbs