Skip to content
View amiraliuks's full-sized avatar
🇽🇰
🇽🇰
12 followers · 13 following

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Highlights

Block or report amiraliuks

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
amiraliuks/README.md

Amir Aliu

I break things and build things. 16 CVEs across IoT devices and open-source CMS platforms.

Target CVEs Findings
Fullhan AJL30PG0803 IP camera 6 Unauthenticated OS command injection, exposed snapshots, default root Telnet, plaintext credential disclosure Read Writeup
Camaleon CMS 2.9.1 7 Authenticated RCE, SSTI-to-RCE, stored XSS, SQLi, broken access control. Co-discovered with @enrik-m, credited in v2.9.2 Read Writeup
MaxSite CMS 3 Auth bypass, unauthenticated RCE via PHP code injection and object injection
CVE IDs

Fullhan: 51402, 51403, 51404, 51405, 51406, 51407

Camaleon: 66748, 67616, 73326, 73329, 73330, 73331, 73332

MaxSite: 70552, 70553, 70554

Building Silent Hill 3 Enhanced, reverse-engineering and modernizing the original PC release.

More at amiraliu.vercel.app

Pinned Loading

  1. portfolio portfolio Public

    Personal Portfolio / covers my projects, CVE research, bug bounty reports, CTF writeups, and certifications. Built with Next.js.

    TypeScript

  2. silent-hill-3-enhanced silent-hill-3-enhanced Public

    A community-made enhancement project for Silent Hill 3 PC, fixing bugs, improving graphics, and restoring content cut from the PC release.

    C++ 11

  3. sh2-achievements sh2-achievements Public

    An achievement system for the original PC version of Silent Hill 2.

    C++

  4. node-sentry node-sentry Public

    Distributed embedded Wi-Fi security monitoring platform. Passive 802.11 attack detection on WeMos D1 Mini Pro nodes with a real-time dashboard.

    Python 3 1

  5. kosovo-gov-site-verification kosovo-gov-site-verification Public

    A lightweight browser extension that verifies whether the website you are visiting belongs to an official government domain of the Republic of Kosovo.

    JavaScript 3

  6. steam-kosovo-flag steam-kosovo-flag Public

    A simple extension that fixes the missing Kosovo flag on steamcommunity profile.

    JavaScript 3