white_devil // Ethical Hacker & Offensive Security Researcher

SYSTEM STATUS: ONLINE // CLEARANCE: LEVEL 5

root@white_devil:~$ whoamiroot@white_devil:~$ whoamiroot@white_devil:~$ whoamiOffensive Security Specialist, Bug Bounty Hunter, Zero-Day Researcher> Offensive Security Specialist_

Ten years of breaking things on purpose: web application penetration testing, binary exploitation, and coordinated vulnerability disclosure. 27 CVEs published, 218 valid bounty reports, zero shortcuts.

[ Download Decrypted CV ]

[ Open Shell Console ]

01/

shell console

INTERACTIVE · SANDBOXED

01/

shell console

INTERACTIVE · SANDBOXED

/bin/bash — guest@white_devil● LIVE
guest@white_devil:~$

/bin/bash — guest@white_devil● LIVE
guest@white_devil:~$

02/

cve & security advisories

COORDINATED DISCLOSURE

02/

cve & security advisories

COORDINATED DISCLOSURE

Identifier

Affected Target

Class

Severity

CVSS

PoC

CVE-2025-41822

Nimbus API Gateway

Auth bypass → RCE

CRITICAL

9.8

write-up

CVE-2025-38104

OrbitCMS 4.x

Unauth SQL injection

CRITICAL

9.4

write-up

CVE-2024-59310

ForgeVPN Client

Local privilege escalation

HIGH

8.1

write-up

CVE-2024-21774

HeliosIoT Firmware

Stack buffer overflow

HIGH

7.9

write-up

CVE-2023-90441

PayLane SDK

Improper cert validation

MEDIUM

6.5

write-up

03/

skill arsenal & tooling

LOAD AVERAGE

03/

skill arsenal & tooling

LOAD AVERAGE

Web App Pentesting  96%

OWASP Top 10, SSRF chains, auth logic flaws, request smuggling

Burp Suite Pro

ffuf

sqlmap

Caido

Web App Pentesting  96%

OWASP Top 10, SSRF chains, auth logic flaws, request smuggling

Burp Suite Pro

ffuf

sqlmap

Caido

Binary Exploitation  88%

ROP chains, heap grooming, kernel LPE, mitigations bypass

pwntools

GDB/pwndbg

AFL++

Binary Exploitation  88%

ROP chains, heap grooming, kernel LPE, mitigations bypass

pwntools

GDB/pwndbg

AFL++

Reverse Engineering  84%

Firmware unpacking, obfuscated malware, protocol recovery

Ghidra

IDA Pro

radare2

Reverse Engineering  84%

Firmware unpacking, obfuscated malware, protocol recovery

Ghidra

IDA Pro

radare2

Network Forensics  79%

PCAP triage, lateral movement detection, C2 beacon analysis

Wireshark

Zeek

Suricata

Network Forensics  79%

PCAP triage, lateral movement detection, C2 beacon analysis

Wireshark

Zeek

Suricata

Cloud Security  82%

IAM privilege paths, container escapes, CI/CD supply chain

Docker

kube-hunter

Prowler

Cloud Security  82%

IAM privilege paths, container escapes, CI/CD supply chain

Docker

kube-hunter

Prowler

Automation & Tooling  91%

Custom scanners, exploit dev pipelines, recon orchestration

Python

Bash

Automation & Tooling  91%

Custom scanners, exploit dev pipelines, recon orchestration

Python

Bash

DAILY DRIVER STACK //

Burp Suite Pro

Metasploit

Ghidra

Wireshark

Docker

Python

Bash

pwntools

nmap

04/

bug bounty & hall of fame

ACKNOWLEDGEMENTS

04/

bug bounty & hall of fame

ACKNOWLEDGEMENTS

VALID_REPORTS

triaged & resolved

VALID_REPORTS

triaged & resolved

BOUNTY_TOTAL

lifetime payouts

BOUNTY_TOTAL

lifetime payouts

CVES_ASSIGNED

MITRE published

CVES_ASSIGNED

MITRE published

UPTIME

since 2016-04-02

UPTIME

since 2016-04-02

HackerOne

#124 global

18,402 rep

HackerOne

#124 global

18,402 rep

Bugcrowd

MVP Q3 2025

P1 accuracy 94%

Bugcrowd

MVP Q3 2025

P1 accuracy 94%

Intigriti

Top 1% EU

312 submissions

Intigriti

Top 1% EU

312 submissions

NIMBUS

VRP Hall of Fame

3 accepted reports

2025

NIMBUS

VRP Hall of Fame

3 accepted reports

2025

ORBITCMS

Whitehat

IDOR · Graph API

2024

ORBITCMS

Whitehat

IDOR · Graph API

2024

FORGEVPN

HackerOne

Top 50 quarterly

2024

FORGEVPN

HackerOne

Top 50 quarterly

2024

HELIOSIOT

Security Ack.

Auth bypass

2023

HELIOSIOT

Security Ack.

Auth bypass

2023

PAYLANE

HackerOne

SSRF chain

2023

PAYLANE

HackerOne

SSRF chain

2023

ARGENT MAIL

Bug Bounty

Memory safety

2022

ARGENT MAIL

Bug Bounty

Memory safety

2022

05/

security research & writeups

TIMESTAMPS IN UNIX UTC

05/

security research & writeups

TIMESTAMPS IN UNIX UTC

ts::

1756800000

14 min

Breaking Nimbus: from header confusion to unauthenticated RCE

A parser differential between the edge proxy and the origin let a crafted Transfer-Encoding chain smuggle admin routes.

#request-smuggling

#rce

#cve-2025-41822

ts::

1750291200

22 min

Heap grooming on musl: a practical tcache-free primitive

Notes on turning an off-by-one in a mallocng-backed allocator into a reliable arbitrary write on modern Alpine builds.

#binary-exploitation

#musl

#heap

ts::

1742083200

11 min

Escaping a hardened container via a leaky CNI plugin

The plugin trusted pod annotations for veth naming. That was enough to reach the node's kubelet credentials.

#cloud

#kubernetes

#container-escape

ts::

1733011200

9 min

Firmware diffing at scale for silent patch detection

Automating Ghidra headless + BinDiff to spot vendors quietly fixing memory corruption without an advisory.

#reversing

#ghidra

#automation

06/

encrypted contact & pgp

GPG --ENCRYPT REQUIRED

06/

encrypted contact & pgp

GPG --ENCRYPT REQUIRED

public key // ed25519

uid: white_devil <root@white-devil.io>
fpr: 9F4C 1B2E 77A0 D3E5 8C61 4B0A E2D9 5510 AF3C 7E24

GitHub

@white-devil

Keybase

white_devil

@white_devil

Discord

white_devil#0x41