Skip to content
View vladko312's full-sized avatar
🚩
Looking for some flags...
🚩
Looking for some flags...
119 followers · 21 following

Achievements

Achievement: QuickdrawAchievement: Starstruckx3Achievement: Pair ExtraordinaireAchievement: YOLOAchievement: Pull Sharkx3Achievement: Arctic Code Vault Contributor

Achievements

Achievement: QuickdrawAchievement: Starstruckx3Achievement: Pair ExtraordinaireAchievement: YOLOAchievement: Pull Sharkx3Achievement: Arctic Code Vault Contributor

Highlights

Block or report vladko312

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
vladko312/README.md

About me

My name is Vlad. I am an ethical hacker, pentester and a CTF player.

I create pentest tools and CTF tasks.

Currently working on:

SSTImap SSTImap Extra Plugins Successful Errors Logic-less Assumptions

My projects

SSTImap - Automatic SSTI detection tool with interactive interface

SSTImap Extra Plugins - Situational extra plugins for SSTImap

FlaskProx - A simple transparent HTTP proxy using Flask

My research

Logic-less Assumptions - Looking for RCE in Safe Template Engines (details will be published later)

CVE-2026-46640 - Writeup about developing payloads for CVE-2026-46640

Successful Errors - New Code Injection and SSTI techniques

v380 IP camera - Learning IoT hacking and looking for vulns in my IP camera

Vulns I registered

GHSA-5hrj-7fc3-cmx9 - RCE in Mustache for Ruby using built-in method access

Pybars3 RCE - RCE via Code Injection in Pybars3 and Pybars4 template engines

CVE-2025-25983 - QR-based device sharing credentials leak in v380 Pro IP camera app

CVE-2025-25984 - Root shell accessible over UART with hardcoded password in v380 camera

CVE-2025-25985 - Plaintext credentials in the filesystem of the v380 camera

Certifications

HJSP

HWSP

Pinned Loading

  1. SSTImap SSTImap Public

    Automatic SSTI detection tool with interactive interface

    Python 1.6k 187

  2. Research_Successful_Errors Research_Successful_Errors Public

    Clear and obvious name of the exploitation technique can create a false sense of familiarity, even if its true potential was never researched, the technique itself is never mentioned and payloads a…

    122 13

  3. extras extras Public

    Extra plugins for SSTImap

    Python 14 6

  4. Research_v380_IP_camera Research_v380_IP_camera Public

    My chaotic attempts at getting into IoT hacking. This research focuses on the HsAKPIQp / V380E6_C1 IP camera I have.

    Python 16 3