Skip to content
View Vasco0x4's full-sized avatar
208 followers · 69 following

Achievements

Achievement: Starstruckx2Achievement: Pull Sharkx2Achievement: YOLOAchievement: Pair ExtraordinaireAchievement: Quickdraw

Achievements

Achievement: Starstruckx2Achievement: Pull Sharkx2Achievement: YOLOAchievement: Pair ExtraordinaireAchievement: Quickdraw

Highlights

Block or report Vasco0x4

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Vasco0x4/README.md

Vasco0x4

Rust Python C++

Penetration Tester | Security Researcher

Published CVEs

CVE Target Severity CVSS Type
CVE-2026-49869 kestra-io/kestra Critical 10.0 Unauthenticated RCE
CVE-2026-82244 Budibase/budibase Critical 9.4 RCE via Plugin eval()
CVE-2026-50189 appsmithorg/appsmith High 8.9 RCE via Env Var Injection
GHSA-xfvv-ggvq-pchh appsmithorg/appsmith High 8.9 RCE via Env Injection (CVE pending)
CVE-2026-55490 openwrt/openwrt Moderate 6.5 Pre-Auth DoS
CVE-2026-55469 grokability/snipe-it Moderate 6.5 Path Traversal
CVE-2026-32034 openclaw/openclaw Medium 5.6 Session Hijacking
CVE-2026-73082 activepieces/activepieces Medium 5.3 SSRF
CVE-2026-49979 appsmithorg/appsmith Moderate 5.1 SSRF

Featured Project

AIDA - AI-Driven Security Assessment

Connect AI assistants to 400+ penetration testing tools through the Model Context Protocol (MCP). AIDA automates reconnaissance, vulnerability scanning, exploitation, and post-exploitation workflows by bridging LLMs with offensive security tooling.

Other Projects

Project Description Tech Stack
ShadeLoader Shellcode loader with process hollowing and AV evasion techniques C++
ShellLoader_Hub Research repository for shellcode injection methods Documentation
Neo-AI Terminal-integrated AI assistant for security operations Python

Contact

Email: Vasco0x4@proton.me
Website: vasco0x4.me

Pinned Loading

  1. AIDA AIDA Public

    Turn any LLM into an autonomous pentester. You define the scope, the agent does the work, you review the findings.

    JavaScript 486 82

  2. Neo-AI Neo-AI Public archive

    Neo AI integrates into the Linux terminal, capable of executing system commands and providing helpful information.

    Python 144 16

  3. ShadeLoader ShadeLoader Public

    ShadeLoader is a shellcode loader designed to bypass most antivirus software. 壳代码, 杀毒软件, 绕过

    C++ 46 5

  4. ShellLoader_Hub ShellLoader_Hub Public

    Shellcode Loader Library.

    14