Skip to content
View Ghxstsec's full-sized avatar
7 followers · 6 following

Block or report Ghxstsec

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Ghxstsec/README.md

Joel Morillas (Ghxstsec)

Junior Pentester · Red Team · Security Research

Website Email LinkedIn Medium

About

Junior pentester focused on offensive security: Active Directory, web app exploitation, and exploit development / CVE research. Hands-on experience through advanced labs (HTB, GOAD-style AD), certifications, and public PoCs.

Portfolio & writeups: soyjoel.com

Featured work

Project What it is
CVE-2025-8110 · Metasploit PR #22115 Gogs authenticated RCE via symlink bypass — PoC + module submitted upstream
CVE-2026-39987 Marimo pre-auth RCE through unauthenticated terminal WebSocket
PHP2SHELL-POC PHP session.upload_progress RCE PoC
ADEnumToolkit AD enumeration / initial-recon CLI (NetExec, Impacket, bloodyAD) with LinPEAS-style report
Subwordlist Target-tailored subdomain wordlist generator for authorized recon

Certifications

Certification Issuer Date
CPTS – Certified Penetration Testing Specialist Hack The Box June 2026
eCPPT – Certified Professional Penetration Tester INE January 2026
CRTSv2 – Certified Red Team Specialist CyberWarfare Labs March 2026
eJPT – Junior Penetration Tester INE December 2025
Google Cybersecurity Professional Certificate Coursera July 2024

In progress: CRTP – Certified Red Team Professional (Altered Security)

Platform activity

Hack The Box — Hacker rank · 50+ machines (Easy–Hard) · focus on Active Directory & web
TryHackMe — Legend rank · Top 1% global · 140+ rooms · Diamond League

Technical focus

Active Directory Kerberos Web App Pentesting Exploit Development Buffer Overflow Python Bash PHP Red Team Methodology

Experience

Independent Technical Consultant · May 2023 – Present
Hardening and least-privilege on local servers · secure LAN/WLAN (WPA3, VLANs) · malware remediation and backup / DR planning

Education

Vocational Degree (Grado Medio) in SMIR — path redirected toward professional cybersecurity certifications

GitHub stats

GitHub stats Top languages

Pinned Loading

  1. CVE-2025-8110 CVE-2025-8110 Public

    PoC for CVE-2025-8110 — authenticated RCE in Gogs via symlink bypass in PutContents API (Metasploit PR #22115)

    Python 5 3

  2. CVE-2026-39987 CVE-2026-39987 Public

    PoC for CVE-2026-39987 — pre-auth RCE in Marimo via unauthenticated /terminal/ws WebSocket

    Python 1

  3. ADEnumToolkit ADEnumToolkit Public

    Educational Active Directory enumeration & initial-recon toolkit (NetExec, Impacket, bloodyAD) with colour-coded report

    Python 1

  4. PHP2SHELL-POC PHP2SHELL-POC Public

    PoC for PHP session.upload_progress RCE (CVE-2026-109618) — race + heap spray to system()

    Python 3

  5. Subwordlist Subwordlist Public

    Target-tailored subdomain wordlist generator for authorized recon and bug bounty

    Python 1

  6. eCPPT-Buffer-Overflow eCPPT-Buffer-Overflow Public

    Buffer overflow exploit scripts for Brainpan (TryHackMe) — eCPPTv3 lab practice

    Python 1