Skip to content
View NicPWNs's full-sized avatar
🏴‍☠️
🏴‍☠️
47 followers · 59 following

Achievements

Achievement: Public SponsorAchievement: Pull Sharkx3Achievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: YOLOAchievement: Starstruck

Achievements

Achievement: Public SponsorAchievement: Pull Sharkx3Achievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: YOLOAchievement: Starstruck

Highlights

Organizations

@trexcoe @UNICORDev

Block or report NicPWNs

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
NicPWNs/README.md

File No. 07CEProfileAwardsHacksProjectsBlogCase file: Nic Jones, alias NicPWNs. Occupation: Hacker. Location: Washington, D.C.

Information security professional by day, security researcher and CTF competitor by night, and a SANS.edu MSISE candidate in between. Find me on LinkedIn, Credly, and Hack The Box.

🏆 Latest win 🔓 Latest CVE 📜 Latest cert 🛠️ Latest project
huntr "Inside Job" AI Red Teaming Challenge
1st Place Overall · Sep 2026		 CVE-2026-62183
Apache Syncope: User Self-Service Privilege Escalation · Jul 2026		 GIAC Penetration Tester (GPEN)
GIAC · Aug 2026		 GlyphGuard
Detects invisible and lookalike Unicode characters · Oct 2026

This file rebuilds itself nightly from the same resume.json that powers nicpjones.com and my PDF resume. How it works.

Pinned Loading

  1. CVE-2026-62183 CVE-2026-62183 Public

    Apache Syncope: User self-service privilege escalation

    Shell 1

  2. GitHub-Discord-Bot GitHub-Discord-Bot Public

    Subscribe a Discord Channel to Events in your GitHub Repositories.

    Python 48 3

  3. UNICORDev/exploit-CVE-2021-22204 UNICORDev/exploit-CVE-2021-22204 Public

    Exploit for CVE-2021-22204 (ExifTool) - Arbitrary Code Execution

    Python 55 6

  4. hamradiowallet.com hamradiowallet.com Public

    A web application enabling Amateur Radio operators to add their license to Apple Wallet and Google Wallet.

    TypeScript 15 3

  5. UNICORDev/exploit-CVE-2022-25765 UNICORDev/exploit-CVE-2022-25765 Public

    Exploit for CVE-2022–25765 (pdfkit) - Command Injection

    Python 31 4

  6. random-unicode-emoji random-unicode-emoji Public

    A simple JavaScript package that returns random Unicode emojis. 📜

    JavaScript 14 3