k0pak4

Follow

Matthew Mathur k0pak4

Follow

22 followers · 20 following

Washington, DC
05:18 (UTC -04:00)
www.mathur.sh
@[email protected]
@k0pak4

Achievements

Achievements

Block or Report

Block or report k0pak4

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

k0pak4/README.md

k0pak4

Security Researcher, Penetration Tester, Software Engineer, Bionicle Enthusiast.
https://www.mathur.sh

CVEs

CVE-2023-30534: Insecure Deserialization of Filter Data in Cacti
CVE-2022-35739: PRTG Network Monitor CSS Injection
CVE-2022-26777: ManageEngine Remote Access Plus Guest User Insecure Direct Object References
CVE-2022-26653: ManageEngine Remote Access Plus Guest User Insecure Direct Object References
CVE-2022-25373: ManageEngine Support Center Plus Stored XSS
CVE-2022-25245: ManageEngine Asset Explorer Information Leakage
CVE-2022-24681: ManageEngine AD Self Service Plus Stored XSS
CVE-2021-38156: Nagios XI Stored XSS
CVE-2021-29643: PRTG Network Monitor Stored XSS
CVE-2021-31813: ManageEngine Applications Manager Stored XSS
CVE-2021-28382: ManageEngine Key Manager Plus Stored XSS
CVE-2021-27956: ManageEngine AD Self Service Plus Stored XSS

Metasploit Modules & Contributions

See all my contributions to Metasploit here.

Nuclei Templates

See a full list of my Nuclei contributions on GitHub here.

Penetration Testing Reporting Tools

Pinned Loading

rapid7/metasploit-framework rapid7/metasploit-framework Public

Metasploit Framework

Ruby 33.4k 13.8k
google-civic-information-api-py google-civic-information-api-py Public

A python wrapper for Google's Civic Information API

Python 3 2
mass-sslscan mass-sslscan Public

Run SSLScan against a large number of targets, saving the data into a reportable format.

Python 4 1
server-header-scan server-header-scan Public

Scan a target list of web servers looking for information leakage through Server HTTP headers

Python 3