Skip to content
View foxcornlab's full-sized avatar
🎯
Focusing
🎯
Focusing
6 followers · 5 following

Highlights

  • Pro

Block or report foxcornlab

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
foxcornlab/README.md
Finding security gaps in web, APIs and AI

Portfolio   ·   Selected work   ·   Research   ·   LinkedIn   ·   Get in touch

I’m Vineeth, an independent cybersecurity consultant based in Bengaluru. I test applications, investigate security gaps, and help teams fix them.

I also founded XEEA in August 2019, a separate SaaS product venture. My freelance consulting is independent of XEEA.

What I work on

  • Web & API security — penetration testing, authentication reviews, and source code review.
  • Red teaming & infrastructure — Active Directory, networks, IoT, and access controls.
  • AI security — prompt injection and data exposure in AI-assisted workflows.
  • Robotics & firmware — ongoing consulting with Tuesday Labs on firmware reverse engineering and AI voice integration.

Research & writing

Web application pentesting — PHP security write-up
White-box web application pentesting
Finding OS command injection in a PHP application. 		AI security research — Google Antigravity
Google Antigravity security research
Indirect prompt injection and data exfiltration risks.

Open to freelance pentesting and security audits. See my consulting work or email me.

Pinned Loading

  1. telegram-mirror-bot telegram-mirror-bot Public

    This is a Telegram bot that uses Aria2 to mirror file to G-Drive.

    JavaScript 3 3

  2. freepbx-rce-detector freepbx-rce-detector Public

    Triage scanner for CVE-2025-57819 (FreePBX Endpoint Manager unauthenticated SQLi to RCE). Detection only, no payloads.

    Python

  3. react2shell-scanner react2shell-scanner Public

    Triage scanner for CVE-2025-55182 (React2Shell) and CVE-2025-66478. Local audit, remote fingerprint, log hunting. Detection only, no payloads.

    Python