Skip to content
View mmadersbacher's full-sized avatar
4 followers · 3 following

Achievements

Achievement: YOLOAchievement: Pair ExtraordinaireAchievement: Pull Sharkx3Achievement: Quickdraw

Achievements

Achievement: YOLOAchievement: Pair ExtraordinaireAchievement: Pull Sharkx3Achievement: Quickdraw

Highlights

Block or report mmadersbacher

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mmadersbacher/README.md

Mario Madersbacher — Security & Networking, Austria

Mario Madersbacher

Security & networking, Austria. I build small tools to understand how systems actually behave — network scanners, device fingerprinting, and the occasional thing that pokes at software from the outside. When I can't explain a behavior, I end up writing the tool that shows me.

Rust and Go when it has to be fast, Python when I just want the answer. Linux as a daily driver.

Published CVEs

CVE-2026-90776 — quadratic-complexity denial of service in nodemailer's addressparser (9.1.0–10.0.4). Crafted address comments stall the Node.js event loop; fixed in v10.0.5. High · CVSS 7.5 · GHSA-prgh-xp8r-p3m5 · assigned by VulnCheck · credited mmadersbacher

CVE-2026-90492 — OS command injection in webgjc/web_robot 2.8.0. VDB-403080 · credited Telqrrr on VulDB

Elsewhere

TryHackMe Junior Penetration Tester · a few CTF placements · accepted bug-bounty reports. Currently going deeper into network protocols, reverse engineering, and Rust.

mmadersbacher.github.io · CTFtime

Pinned Loading

  1. IoTShade IoTShade Public

    Network and IoT discovery in Rust · passive sniffing plus active ARP/mDNS/SSDP/DHCP/SNMP scans, OUI vendor lookup and device fingerprinting

    Rust 1

  2. API_Hunter API_Hunter Public

    API recon and security scanner in Rust for bug-bounty work · discovery, JS analysis, auth/GraphQL/mass-assignment checks

    Rust 1

  3. AegisNet AegisNet Public

    Local network scanner with light deep-packet inspection · Rust (Axum) backend, React/TypeScript frontend

    Rust

  4. NetReconUltra NetReconUltra Public

    Fast network scanner in Go with a React dashboard · discovery, port scanning and service detection

    Go