Thanks to visit codestin.com
Credit goes to github.com

Skip to content
View JunZ-Leo's full-sized avatar
🎯
OOF
🎯
OOF
8 followers · 7 following

Achievements

Achievement: QuickdrawAchievement: YOLO

Achievements

Achievement: QuickdrawAchievement: YOLO

Organizations

@MicrosoftResearch @microsoft @Azure @dotnet @cse-labs @MicrosoftCopilot

Block or report JunZ-Leo

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
JunZ-Leo/README.md

JunZ-Leo

Security research, Go networking, and Windows deployment automation.

Website | Security reports

Security Research

Credited reporter for CVE-2025-4028 and CVE-2025-4030. Both published CVE records credit Junz_Leo (VulDB User) as the reporter and reference my technical reports.

Published CVE Research Report
CVE-2025-4028 SQL injection in PHPGurukul COVID19 Testing Management System (profile.php) Read report
CVE-2025-4030 SQL injection in PHPGurukul COVID19 Testing Management System (search-report-result.php) Read report

Selected Projects

Project Focus Current status
Security Research Public vulnerability reports, remediation recommendations, and links to published CVE records. Two published CVEs with reporter credit
Fluxgate Core A compatibility-preserving rewrite of the MetaCubeX proxy core, focused on Go networking and Clash-compatible configuration and APIs. v0.1.0-rc.1 pre-release
Windows 11 Offline Deployment Guide A bilingual guide to offline Windows deployment with MDT and Ventoy, including PowerShell tooling and documented deployment pitfalls. Community guide for retired MDT tooling

Pinned Loading

  1. CVE CVE Public

    Published vulnerability reports by JunZ-Leo; credited reporter for CVE-2025-4028 and CVE-2025-4030.

  2. fluxgate-core fluxgate-core Public

    A compatibility-first proxy core with Clash-compatible configuration and API.

    Go

  3. mdt-win11-deployment-guide mdt-win11-deployment-guide Public

    A comprehensive guide for deploying Windows 11 using Microsoft Deployment Toolkit (MDT) 8456 with offline USB media (Ventoy), based on real-world production experience.

    PowerShell 5