Skip to content
View caverav's full-sized avatar
🐧
🐧
47 followers · 23 following

Achievements

Achievement: StarstruckAchievement: Pull Sharkx2Achievement: QuickdrawAchievement: YOLOAchievement: Pair Extraordinaire

Achievements

Achievement: StarstruckAchievement: Pull Sharkx2Achievement: QuickdrawAchievement: YOLOAchievement: Pair Extraordinaire

Highlights

Block or report caverav

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
caverav/README.md

Security Engineer • Web/Application Security • Mobile Security
Vulnerability Research • CVE contributor • CTF player

Blog • LinkedIn

🔬 Research Focus

🐞 Featured CVEs
CVE-2025-67635
Unauthenticated asymmetric DoS via Jenkins CLI.		 CVE-2025-9624
Query rewriting complexity blow-up.
CVE-2025-9375
XML structure manipulation via crafted keys.		 CVE-2025-7969
XSS via fence rendering bypass.
CVE-2025-8101
Prototype pollution → XSS.		 More write-ups
All advisories and write-ups.

📈 Activity

Pinned Loading

  1. NixOS/nixpkgs NixOS/nixpkgs Public

    Nix Packages collection & NixOS

    Nix 23.6k 18.1k

  2. ChiChou/grapefruit ChiChou/grapefruit Public

    (WIP) Runtime Mobile Application Pentest Tool for iOS and Android. Previously Passionfruit

    TypeScript 1.1k 89

  3. trimstray/the-book-of-secret-knowledge trimstray/the-book-of-secret-knowledge Public

    A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

    208k 12.5k

  4. flutterdec flutterdec Public

    CLI tool that decompiles Flutter Android AOT (libapp.so) into Dart-like pseudocode, supporting obfuscated builds.

    Rust 3

  5. Burp-Suite-Image-Viewer Burp-Suite-Image-Viewer Public

    Burp Suite extension that adds an Image tab for displaying images contained in responses.

    Java

  6. auditforge auditforge Public

    AuditForge is a pentest reporting application making it simple and easy to write your findings and generate a customizable report.

    TypeScript 79 5