Skip to content
View cbxcvl's full-sized avatar
🏴‍☠️
Focusing
🏴‍☠️
Focusing

Block or report cbxcvl

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
cbxcvl/README.md

Hey, I'm Carlos Buratto 👋

Offensive Security · Red Team · Full-Stack Developer

Blog LinkedIn Hacking Club


🧠 About me

Offensive security professional with 3+ years of hands-on development experience. I break things to understand how they work — then help make them resilient. Currently focused on AppSec, Pentesting, and Red Team operations, backed by real-world experience shipping fullstack apps, IoT infrastructure, and embedded systems at scale.

  • 🔴  Certified Red Team Analyst (CRTA) & Red Team Infrastructure Developer (CRT-ID)
  • 🏆  Top 2 on Hacking Club
  • 🛠️  Building cbxbb — a Bug Bounty automation platform
  • 🐧  Open source contributor — shipped Bluetooth auto-connect to Noctalia Shell (4.3k+ ⭐)
  • ✍️  Writing security research & writeups at cbxcvl.xyz
  • 🌍  Português · English · Deutsch

⚡ Tech Stack

Security & Red Team

OWASP Burp Suite Nuclei Subfinder Naabu Httpx

Languages & Frameworks

Go TypeScript Python Node.js NestJS Next.js QML

Infra & Cloud

Docker AWS Terraform Grafana InfluxDB PostgreSQL MongoDB

IoT & Embedded

Raspberry Pi ESP32 MQTT Zigbee Home Assistant TensorFlow

AI & Automation

RAG MCP YOLO Google Coral Node-RED


🏅 Certifications

Certification Focus
CRTA — Certified Red Team Analyst Red Team Operations
CRT-ID — Red Team Infrastructure Developer Infra for Red Team
CPPS — Certified Phishing Prevention Specialist Social Engineering
CCEP — Certified Cybersecurity Educator Professional Security Education
Multicloud Network Associate Cloud Networking

🔓 Open Source Contributions

Project Contribution Stars
Noctalia Shell Bluetooth auto-connect for trusted devices — PR #1981 · shipped in v4.6.2 4.3k+ ⭐

📌 Featured Projects

cbxbb — Bug Bounty automation platform built with Go + Next.js

YAML-based workflows · Subfinder/Nuclei/Httpx/Naabu integration · Change detection · Discord & Telegram notifications · Real-time dashboard


 ⚔️ break → understand → secure → repeat

Pinned Loading

  1. BTK BTK Public

    Burp MCP proxy with compression pipeline — reduces 182KB responses to ~4KB

    Rust 32 3

  2. git-pre-hook git-pre-hook Public

    A security research project demonstrating how Git hooks can be weaponized as a Remote Code Execution (RCE) vector in software supply chain attacks.

    1