Skip to content
View sornram9254's full-sized avatar
🎯
Focusing
🎯
Focusing
25 followers · 55 following

Achievements

Achievement: YOLOAchievement: Pull Shark

Achievements

Achievement: YOLOAchievement: Pull Shark

Highlights

Block or report sornram9254

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
sornram9254/README.md

Hi there 👋

  • 🔭 I’m currently working on: Information Security Engineer / Consultant / Penetration Tester
  • 🌱 I’m currently learning: Cyber Security
  • 🎓 Education:
    • King Mongkut's University of Technology North Bangkok
      • Bachelor of Science in Technical Education (B.S.Tech.Ed.)
    • Sukhothai Thammathirat Open University
      • Sumrit Certificate 87 (Science and Technology)
    • Ayutthaya Technical College
      • Vocational Certificate in Electrical and Electronics (Voc. Cert.)
  • 📫 How to reach me:
  • 🥇 Honors & Awards:
    • Mobile Penetration Testing CTF Workshop Competition by Secure-D, 2nd Runner-Ups.
    • Thailand CTF Competition 2018 by ETDA, Top 10 Runner-Ups.
    • Thailand’s Network Security Contest 2016 by G-Able, Top 10 Runner-Ups.
    • OTPC App Hackathon 2013 by Google, Honorable Mention.
  • 🧑‍💻 Wargames/CTF/Playground:
    • Hack the Box : app.hackthebox.com/profile/63873
    • Root-me : root-me.org/sornram9254
    • Try Hack Me : tryhackme.com/p/sornram9254
    • PentesterLab : pentesterlab.com/profile/sornram9254
    • Hack The Box : app.hackthebox.com/profile/63873
    • CTF-Time : ctftime.org/user/6117
    • HackerOne : hackerone.com/sornram9254
    • Open Bug Bounty : openbugbounty.org/researchers/sornram9254/
  • 🪲 CVEs:
    • CVE-2022-38577 : ProcessMaker - User Profile Privilege Escalation)
    • CVE-2023-37137 : (RESERVED) _____________________________________
    • CVE-2025-25539 : Local File Inclusion in Vasco Self-Service Portal
    • CVE-2025-27997 : Privilege Escalation via Insecure File Permissions in Blizzard Battle.net
    • CVE-2025-27998 : Privilege Escalation via Insecure File Permissions in Steam Client
    • CVE-2025-12451 : Wordpress Plugins, Easy SVG Support <= 4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
    • CVE-2025-12457 : Wordpress Plugins, Enable SVG, WebP, and ICO Upload <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads
  • Reported vulnerability, xxxxxxxx TODO xxxxxxxx
    • Collaborative Research in Computational Neuroscience (CRCNS) kudos
    • Global Association for Quality Management (GAQM)
    • Chulalongkorn University, Thailand
    • Kasetsart University, Thailand
    • Thailand Professional Qualification Institute (TPQI)
    • Ministry Of Energy, Thailand
    • Major Cineplex, Thailand
    • JBL by HARMAN
    • Social Security Office, Thailand
    • playeternalreturn.com
    • usersearch.org
    • etc...
  • ⚔️ Certificatons & Badges:
    • Knight Squad Academy
      • Certified Web App Penetration Testing Apprentice (kWAPTA) verify
    • Red Team Leaders
      • Certified Cybersecurity Educator Professional (CCEP) verify
    • TryHackMe
      • Junior Penetration Tester (PT1) verify
    • The SecOps Group
      • Certified AppSec Practitioner (CAP) verify
      • Certified Cloud Security Practitioner : AWS (CCSP-AWS) verify
      • Certified Network Pentester (CNPen) verify
      • Certified Active Directory Pentesting eXpert (C-ADPenX) verify
    • CyberWarFare Labs
      • Multi-Cloud Red Team Analyst (MCRTA) verify
      • Certified Red Team Analyst (CRTA) verify
      • Certified Cyber Security Analyst (C3SA) verify
    • OffSec (FKA Offensive Security)
      • Offensive Security Certified Professional (OSCP) verify
    • INE Security (FKA eLearnSecurity)
      • Junior Penetration Tester v1 (eJPT) / Junior Penetration Tester v2 (eJPT) verify v.1, verify v.2
      • Web Application Penetration Tester (eWPT) verify
      • Web application Penetration Tester eXtreme (eWPTX) verify
      • Mobile Application Penetration Tester (eMAPT) verify
    • CertiProf
      • Cyber Security Foundation (CSFPC) [Expired] verify
    • Broadcom (FKA Symantec)
      • Technical Specialist Exam : Symantec™ Endpoint Protection 14 (BTSE) verify
    • Check Point Software Technologies
      • Check Point SandBlast Sales Certification [Expired] verify
    • Thailand Professional Qualification Institute (TPQI)
      • Professional Qualifications (System Analysis and Design) verify
    • IT Professionals Examination Council (ITPEC)
      • Information Technology Professional Examination Certificate (ITPE) verify

Pinned Loading

  1. CVE-BBP-VDP CVE-BBP-VDP Public

    CVE-BBP-VDP — Including Reported Vulnerabilities

    Python 2

  2. vegas2movieStudio vegas2movieStudio Public

    แปลงไฟล์ Sony Vegas (*.veg) ไปเป็นไฟล์ Sony Movie Studio (*.vf)

    C# 2

  3. klogic_parser klogic_parser Public archive

    ระบบดึงข้อมูลหลักสูตรการศึกษา และข้อมูลรายวิชาที่เรียนในแต่ละเทอม

    PHP 1

  4. Sornram-Code-Editor Sornram-Code-Editor Public

    C

  5. Sample-CreditCard-Validation Sample-CreditCard-Validation Public

    C#