Break assumptions
I look for places where systems trust user-controlled state, stale permissions, inherited behavior, or implicit identity.
>_
Cyber Security Researcher
Ethical Hacker · Bug Bounty Hunter
Exploring systems. Breaking assumptions. Documenting the overlooked.
View profileSurface
Public stats cached · last sync Jul 6, 2026 01:12 UTC
Approach
I find security flaws before they become breaches, with a focus on web, API, and offensive security research.
I look for places where systems trust user-controlled state, stale permissions, inherited behavior, or implicit identity.
Most meaningful bugs sit between components: browser and server, user and tenant, API and worker, cache and origin.
A good report should make the issue reproducible, explain impact, and reduce the time between discovery and fix.
When a pattern repeats, I turn it into a script, workflow, or research note so the next investigation starts sharper.
Contact
Use the contact flow to start a private thread, and keep sensitive target names or exploit details out of the first message.
Get in touch