Jefferson Gonzales Email & Phone Number

As a passionate cybersecurity enthusiast, I possess extensive knowledge of Ethical Hacking and Penetration Testing. With a good understanding of vulnerabilities and their mitigation. In addition, my expertise and training in web application security have further enhanced my skills in this field.Skills:• Web Application Pentesting• API Pentesting• OSINTPublications:• CVE-2023-0748: Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6• CVE-2023-25313: OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4• CVE-2023-25314: Cross Site Scripting (XSS) vulnerability in World Wide Broadcast Network AVideo before 12.4• CVE-2023-30860: WWBN AVideo is an open source video platform. In AVideo prior to version 12.4, a normal user can make a Meeting Schedule where the user can invite another user in that Meeting, but it does not properly sanitize the malicious characters when creating a Meeting Room. This allows attacker to insert malicious scripts. Since any USER including the ADMIN can see the meeting room that was created by the attacker this can lead to cookie hijacking and takeover of any accounts. Version 12.4 contains a patch for this issue.Certifications:• Certified Appsec Practitioner (CAP)• Received a Letter of Appreciation from Eset, McAfee, GeeksforGeeks and HuaweiAcknowledgement & Hall of Fame• Google, Microsoft, Apple, Nokia, Sony, BBC, United Nation, Airship and many more.Profiles:• https://twitter.com/gonzxph• https://hackerone.com/shinta0x01• https://bugcrowd.com/gonzxph

• 

  Cybersecurity Lead

  Google Developer Student Clubs - Cebu Technological University

  Mandaue City, Ph