Command Palette

Search for a command to run...

Swezy <3
Unknown

Swezy

Penetration Tester & Security Researcher

Location

Germany

GitHubSwezyDev
X / Twitter@Swezy_1337

At 17, working professionally as a pentester at Netvolo. At 16, took down a live Turkish card skimming operation via RCE on a malware C2 and responsibly disclosed a critical account takeover vulnerability to Whitepages.com — acknowledged by their security team.

Experience

Penetration Tester

Netvolo

2025 - Present

  • •Performing professional penetration tests for clients
  • •Identifying and reporting security vulnerabilities in web applications and infrastructure

Independent Security Researcher

Independent

2024 - Present

  • •Discovered and responsibly disclosed a critical account takeover vulnerability on Whitepages.com — full ATO with no victim interaction required. Confirmed and acknowledged by Whitepages security team, October 2025. (No bug bounty program at time of disclosure.)
  • •Developed RAT-Vulnerabilities, a tool used to RCE a live malware C2 server, taking down a Turkish card skimming operation targeting hotel management systems
  • •Published detailed technical write-ups on vulnerability research, malware analysis, and exploit development
  • •Reverse engineered XWorm v5.6 and identified a command injection vulnerability in the HiddenRDP module (patched in v6.0)

Tool & Automation Developer

Independent Projects

2023 - Present

  • •Building automation tools, Discord/Telegram bots, and CLI utilities primarily in Python
  • •Building payment systems with license key generation, validation, and automation
  • •Managing deployment and infrastructure across Linux and Windows environments

Notable Projects

RAT-Vulnerabilities

Vulnerability research tool targeting popular RATs. Used in a real-world operation to RCE an XWorm C2 server and take down a card skimming operation.

Proof of concept for a critical account takeover vulnerability disclosed to Whitepages.com. Full ATO via password reset token leak in API response. Confirmed and acknowledged by Whitepages security team, October 2025.

AnyGrab

Real-time AnyDesk connection monitor with a gradient CLI interface.

MultiExodus

Tool to manage multiple Exodus crypto wallets seamlessly.

Skills & Tools

Security & Research

Vulnerability ResearchPenetration TestingReverse EngineeringMalware AnalysisExploit DevelopmentResponsible DisclosureThreat Intelligence

Languages

Databases & Storage

Automation & Bots

Discord BotsTelegram BotsPython ScriptingWeb ScrapingTask SchedulingWebhook Integration

Languages

German

Native

English

Fluent

Interested in working together?

Get in Touch