---

> sobre mim🫶

┌──(wyllowDev㉿kali)-[~]
└─$ id
uid=1337(wyllowDev) gid=1337(redteam) groups=1337(redteam),0(root)

┌──(wyllowDev㉿kali)-[~]
└─$ cat about.txt
Pentester focado em segurança ofensiva, exploração de vulnerabilidades
e análise profunda de aplicações web e infraestruturas.
Atualmente atuando na HugeNetwork com experiência prática em
ambientes reais, bug bounty e automação de testes de segurança
---

> tech_stack --list-all

💻 Linguagens de Programação

🧩 Frameworks & Frontend

⚙️ DevOps & Infraestrutura

🔐 Security & OS

Specialized Security OS & Platforms

---

> pentest --skills --verbose

Web Application Pentest [✓] XSS — Stored, Reflected, DOM [✓] SQL Injection [✓] CSRF / SSRF [✓] IDOR [✓] File Upload Bypass [✓] LFI / RFI [✓] Open Redirect [✓] Race Conditions [✓] WAF Bypass [✓] Payload Obfuscation & Encoding [✓] Fuzzing Avançado [✓] Exploração Manual [✓] XXE Injection [✓] SSTI (Template Injection) [✓] HTTP Request Smuggling [✓] Insecure Deserialization [✓] CORS Misconfiguration [✓] Clickjacking Auth & Session Attacks [✓] Broken Authentication [✓] Session Hijacking & Fixation [✓] JWT Attacks (alg:none, RS→HS) [✓] OAuth 2.0 Flaws [✓] Brute Force / Credential Stuffing [✓] Rate Limit Bypass [✓] 2FA Bypass [✓] Password Reset Poisoning

Network Pentest [✓] Enumeração de Rede [✓] Nmap Avançado (NSE Scripts) [✓] FTP • SMB • SSH • RDP [✓] SNMP Enumeration [✓] DNS Zone Transfer [✓] Pivoting [✓] Port Forwarding [✓] Tunneling (Chisel, Ligolo-ng) [✓] ARP Spoofing / MITM [✓] Pass-the-Hash / Pass-the-Ticket Cloud Security [✓] AWS — S3, IAM, EC2, Lambda [✓] Azure AD Attacks [✓] GCP Misconfigurations [✓] Privilege Escalation [✓] SSRF → Cloud Metadata [✓] Exposed Keys & Secrets [✓] Container Escape (Docker/K8s) API Security [✓] REST & GraphQL [✓] IDOR em APIs [✓] Mass Assignment [✓] Rate Limiting Bypass [✓] GraphQL Introspection Abuse [✓] Broken Object Level Auth [✓] API Key Leakage

---

> recon --automate

#!/usr/bin/env python3
# wyllowDev — Recon Pipeline

scope = "target.com"

tools = {
    "Amass":      f"amass enum -d {scope} -o recon/subdomains.txt",
    "Subfinder":  f"subfinder -d {scope} -o recon/subfinder.txt",
    "httpx":      f"httpx -l recon/subdomains.txt -o recon/live_hosts.txt",
    "FFUF":       f"ffuf -u https://{scope}/FUZZ -w wordlist.txt -o recon/dirs.txt",
    "Nuclei":     f"nuclei -l recon/live_hosts.txt -t ~/nuclei-templates/ -o recon/nuclei.txt",
    "gau":        f"gau {scope} | tee recon/endpoints.txt",
    "LinkFinder": f"python3 linkfinder.py -i https://{scope} -o cli",
    "Wayback":    f"waybackurls {scope} | tee recon/wayback.txt",
    "Katana":     f"katana -u https://{scope} -o recon/crawl.txt",
    "TruffleHog": f"trufflehog git https://github.com/target/repo",
}

for name, cmd in tools.items():
    print(f"[*] Running {name}...")
    os.system(cmd)

---

> ferramentas --list --full

🔴 Exploitation & Web

Tool	Badge	Description
Burp Suite		Proxy, Scanner, Intruder
OWASP ZAP		Análise Automatizada
SQLmap		SQL Injection Automation
XSStrike		XSS Detection & Exploitation
Dalfox		XSS Scanner
Commix		Command Injection

🌐 Network & Infrastructure

Tool	Badge	Description
Nmap		Port Scan & NSE Scripts
Metasploit		Exploitation Framework
Impacket		SMB & Kerberos Attacks
CrackMapExec		AD & Lateral Movement
Chisel		Tunneling & Pivoting
Ligolo-ng		Advanced Pivoting

🔎 Recon & Fuzzing

Tool	Badge	Description
FFUF		Directory & Parameter Fuzzing
Nuclei		Templates de Vulnerabilidades
Amass		Subdomain Enumeration
Subfinder		Passive Recon
Katana		Web Crawler Avançado
TruffleHog		Secrets & Credential Leaks

🔐 Password & Auth Attacks

Tool	Badge	Description
Hashcat		GPU Password Cracking
John the Ripper		Hash Cracking
Hydra		Brute Force Online
Medusa		Parallel Login Brute Force

---

> education --certs --verbose

┌──(wyllowDev㉿kali)-[~]
└─$ cat credentials.txt

Formação Acadêmica

Instituição	Curso	Status
FIAP	Análise e Desenvolvimento de Sistemas	🎓 Cursando
FIAP	Cibersegurança	🎓 Cursando

---

Certificações

Offensive Security Certified Professional OffSec	Pentest Profissional Desec Security PPTP / PNPT	eLearnSecurity Junior Penetration Tester INE Security	Certified Ethical Hacker EC-Council
CompTIA Security+ CompTIA	AWS Cloud Practitioner Amazon Web Services	OWASP Top 10 Web Exploitation Desec Security	Linux Essentials LPI

---

> projects --list --status

┌──(wyllowDev㉿kali)-[~/projects]
└─$ ls -la

drwxr-xr-x  ??  wyllowDev  redteam  [SOON]  recon-automation/
drwxr-xr-x  ??  wyllowDev  redteam  [SOON]  exploit-toolkit/
drwxr-xr-x  ??  wyllowDev  redteam  [SOON]  bugbounty-scripts/
drwxr-xr-x  ??  wyllowDev  redteam  [SOON]  ctf-writeups/
drwxr-xr-x  ??  wyllowDev  redteam  [SOON]  ad-attack-lab/

┌──(wyllowDev㉿kali)-[~/projects]
└─$ cat README_projects.txt

[!] Novos projetos públicos em breve.
    Atualmente ocupado com engagements ativos,
    bug bounty e desenvolvimento interno.
    Stay tuned. 

Mais projetos serão disponibilizados em breve. ultimamente estou focado em bug bounty,estudos, pesquisas de vulnerabilidades e desenvolvimento de ferramentas internas. Volte em breve para novidades meu bbs

---

> stats --github