👋 Hello there! We're Web Hacker Team

"Web Hacket Team" was established in January 2024, comprising two dedicated members: Searat and izut. Our team is committed to the field of web security and binary security, conducting in-depth research and analysis to uncover vulnerabilities and enhance the overall security landscape of web applications and binary systems.

• 🏠 Our team is currently located in China 🇨🇳.
• 📧 Contact us or apply to join our team by emailing web_hacker@163.com.
• 🤝 We are looking for more members.
• 💬 Ask us any technical questions, and we'd be happy to help;
• 👨🏻‍💻 Most of our projects are on Github
• 💻 Our members are cybersecurity experts, including Searat and izut.
• 🎯 We are currently focused on developing open-source security tools and conducting cybersecurity research.
• 🎮 We love PVP games, which help us relax and unwind from the pressures of work.

🧐 A little more about us...

CONST WEB_HACKER_TEAM = {
  pronouns: "He" | "him",
  team_members: ["Searat", "izut"],
  backend: ["Python", "PHP", "HTML"],
  database: ["mySQL", "Redis"],
  challenge: "We will continue to contribute to the field of cyber security."
}

🛠️ Our Discovered Vulnerabilities

[CVE-2024-8029] Stored XSS in imartinez/privategpt
[CVE-2024-7962] Arbitrary File Read in gaizhenbiao/chuanhuchatgpt
[CVE-2024-50405] CRLF Injection in QTS and QuTS hero
[CVE-2024-53693] CRLF Injection in QTS and QuTS hero
[CVE-2025-3535] Denial of Service in shuanx BurpAPIFinder v2.0.2