Skip to content
View amiraliuks's full-sized avatar
馃嚱馃嚢
馃嚱馃嚢
12 followers · 13 following

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Highlights

Block or report amiraliuks

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don鈥檛 include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user鈥檚 behavior. Learn more about reporting abuse.

Report abuse
amiraliuks/README.md

Amir Aliu

Security Researcher - Vulnerability Research 路 Web/IoT Security 路 Full-Stack Development

16x CVE holder across embedded/IoT devices and open-source CMS platforms.

Fullhan AJL30PG0803 IP Camera (writeup)

Unauthenticated OS command injection, exposed snapshots, default root Telnet, plaintext credential disclosure

Camaleon CMS 2.9.1 - co-discovered with @enrik-m (writeup)

Authenticated RCE, SSTI-to-RCE, stored XSS, SQLi, broken access control 路 credited in v2.9.2

MaxSite CMS

Auth bypass, unauthenticated RCE via PHP code injection and object injection

More cool stuff at amiraliu.vercel.app 路 Building Silent Hill 3 Enhanced - reverse-engineering and modernizing the original PC release.

Pinned Loading

  1. portfolio portfolio Public

    Personal Portfolio / covers my projects, CVE research, bug bounty reports, CTF writeups, and certifications. Built with Next.js.

    TypeScript

  2. silent-hill-3-enhanced silent-hill-3-enhanced Public

    A community-made enhancement project for Silent Hill 3 PC, fixing bugs, improving graphics, and restoring content cut from the PC release.

    C++ 9

  3. sh2-achievements sh2-achievements Public

    An achievement system for the original PC version of Silent Hill 2.

    C++

  4. node-sentry node-sentry Public

    Distributed embedded Wi-Fi security monitoring platform. Passive 802.11 attack detection on WeMos D1 Mini Pro nodes with a real-time dashboard.

    Python 3 1

  5. kosovo-gov-site-verification kosovo-gov-site-verification Public

    A lightweight browser extension that verifies whether the website you are visiting belongs to an official government domain of the Republic of Kosovo.

    JavaScript 3

  6. steam-kosovo-flag steam-kosovo-flag Public

    A simple extension that fixes the missing Kosovo flag on steamcommunity profile.

    JavaScript 3