Joshua van der Poll

Certificates

PEN-200 (OSCP)

Offensive Security

In Progress

Penetration Testing Exploit Development Active Directory Linux Windows

Red Teaming Learning Path

TryHackMe

Hard Verify

Red Teaming Windows Penetration Testing Active Directory

Jr Penetration Tester Learning Path

TryHackMe

Hard Verify

Red Teaming Penetration Testing Linux

Web Fundamentals Learning Path

TryHackMe

Easy Verify

Red Teaming Penetration Testing Application Penetration Testing General Cyber

Pre Security Learning Path

TryHackMe

Easy Verify

Purple Teaming General Cyber Security Analysis Linux

Introduction to Cyber Security Learning Path

TryHackMe

Easy Verify

Blue Teaming Linux Security Analysis Security Operations

CVE Exploits

View all

joshuavanderpoll/CVE-2021-3129

exploit python php laravel rce deserialization

Laravel RCE Exploit Script

139 25

joshuavanderpoll/CVE-2026-25643

exploit go rce surveillance blind-rce

CVE-2026-25643: Frigate ≤0.16.3 Blind RCE via go2rtc exec injection

Featured on Kali Linux

5 0

joshuavanderpoll/CVE-2025-14847

exploit python mongodb nosql rce

MongoBleed

3 0

joshuavanderpoll/CVE-2026-2991

exploit php wordpress auth-bypass idor

PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and admin session extraction.

1 0

joshuavanderpoll/CVE-2026-3891

exploit php wordpress file-upload

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload (CVE-2026-3891) PoC

1 1

joshuavanderpoll/cve-2024-56348

exploit java auth-bypass rce teamcity

CVE-2024-56348 — JetBrains TeamCity <2024.12 auth bypass + RCE exploit (unauthenticated SYSTEM_ADMIN + shell)

1 0

joshuavanderpoll/cve-2025-32433

exploit go erlang ssh rce unauthenticated

Go PoC for CVE-2025-32433 — unauthenticated RCE in Erlang/OTP SSH.

1 0

joshuavanderpoll/CVE-2025-69985

exploit nodejs scada auth-bypass rce

CVE-2025-69985: FUXA ≤1.2.8 Auth Bypass + RCE via /api/runscript

1 0

Proud Projects

View all

joshuavanderpoll/DitherMe

python c image-processing gif effects

Creates Watch Dogs 2 DedSec-style dithered images and GIFs

17 0

joshuavanderpoll/PGPBox-js

javascript nodejs pgp cryptography encryption

A user-friendly PGP Web GUI for generating, encrypting, signing, verifying, and decrypting PGP messages. Secure your communications effortlessly with this web-based GitHub hosted application.

2 0

joshuavanderpoll/CMS-Detector

go recon cms fingerprinting osint

A lightweight fast Go script to detect which CMS or framework a given website is running, based on HTTP response fingerprints.

2 1