GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • blog
  • ctf
  • live
  • cves
  • GitHub
  • Twitter
  • LinkedIn

This view

  • Original page
  • New address

GeezerVison is showing devploit.dev — Daniel Púa · devploit · Security Researcher

> Head of Security · Security Researcher · CTF Player

Daniel Púa

@devploit

Real-world infosec, no hype.
Never trust a fox.

I'm Daniel Púa, also known as devploit, Head of Security at Magnific and a security researcher based in San Francisco, California. My work spans offensive security, penetration testing and bug bounty research, alongside open-source tools and Capture the Flag competitions.

  • Head of Security @ Magnific
  • Hack&Beers Málaga
  • ECSC Spain 2021
  • ripp3rsCTF / SFPE

// security research & experience

MG
role

Head of Security · Magnific

Managing security at scale · San Francisco

visit company
SR
research

Security Researcher · Freelance

Bug Bounty · Penetration Testing · Consulting

get in touch
ES
team

ECSC Spain 2021 · Mentor 2022

Spain's national cybersecurity team

HB
community

Hack&Beers Málaga Organizer

Security community

see community

// latest posts

featured posts
Security Research
The Bug Was Four Layers Down: Five CVEs in npm Dependencies
Jul 2026
Mobile Security
Reading Contact Photos Without READ_CONTACTS: A Google Messages Confused Deputy Bug
Jul 2026
Exploitation
DEFCON Quals 2025 - Memory Bank CTF Challenge Writeup
Apr 2025
→ view all posts
// research & recognition
Competitive work

CTF Results, Live Hacking Events and Assigned CVEs.

A concise view of hands-on work across competitive security, invite-only live hacking and responsible disclosure, with separate pages for the full lists and references.

CTF Awards

Selected wins and podiums across solo and team CTFs.

Since 2017
  • 1st · Google Security Forum 2024
    2024
    Madrid · SecOps & Threat Intelligence CTF
  • 1st · Google Security Forum 2023
    2023
    Madrid · Chronicle CTF
  • 1st · Andalusian Cybersecurity Congress
    2023
    Málaga
  • 1st · Navaja Negra CTF
    2022
    Albacete
  • 3rd · Digital Overdose Autumn CTF
    2021
    Team result with ripp3rs
View all CTF results

Live Hacking Events

Selected onsite bug bounty event results.

RootedCON 2025-2026
  • 2nd · RootedCON Hacker Night
    2026
    Madrid
    Intigriti Onsite
  • 4th · RootedCON Hacker Night
    2025
    Lisbon
    Yogosha Onsite
View live hacking events

CVEs

Selected assigned vulnerabilities and public advisory references.

13 assigned
  • CVE-2026-39244
    2026
    adm-zip < 0.5.18 · Denial of Service via Unbounded Memory Allocation
    CVSS 7.5 High DoS CWE-400
  • CVE-2026-39246
    2026
    decompress <= 4.2.1 · Arbitrary Symlink Creation and Information Disclosure
    CVSS 7.5 High Symlink CWE-59
  • CVE-2026-6379
    2026
    WP Photo Album Plus < 9.1.11.001 · Unauthenticated SQL Injection
    CVSS 8.6 High SQLI CWE-89
View all CVEs
// products
Built and running

Tools I ship and keep online.

Free, browser-first security and data tools used daily by pentesters and researchers. Each one runs in production, with no accounts and no data leaving your machine.

jwtforge.com live

JWTForge

Decode, audit and break JWTs, entirely in your browser.

  • Decode and verify with a secret, a public key or a JWKS URL
  • Audit signals: alg:none, weak algorithms, kid / jku / x5u injection
  • Six attack generators with curl, Burp, nuclei and jwt_tool exports
6 attack generators, zero requests sent
open
client-side pentest free
pwny.cc live

pwny.cc

Payload repository for security researchers.

  • Curated payloads organised by technique and target
  • Copy-ready snippets for engagements and CTFs
  • Kept current from real-world testing
24/7 payload reference, always online
open
reference payloads ctf
x-utils.com live

x-utils

Metrics from X without paying for the API.

  • Twelve copy-paste console tools: non-followers, engagement, exports
  • Read-only, never asks for a password, no server involved
  • Interactive HTML report plus CSV and JSON exports
12 tools, zero servers, zero API keys
open
javascript read-only open source

// open source

nomore403 +1700 ★

Tool to bypass 403/40X HTTP responses

Go ctf
awesome-ctf-resources +700 ★

CTF frameworks, libraries, resources and software for CTF players

reference ctf
debugHunter +200 ★

Discover hidden debugging parameters and uncover web application secrets

JS recon
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.