About

Hello World !

I’m Kuromatae, a full time Bug Bounty Hunter !

What I enjoy the most is web exploitation, and especially getting past the things that are supposed to stop me: WAFs, reverse proxies, …
I have a soft spot for access-control bugs and for turning almost nothing (a single header, an unvalidated id) into a nice chain that ends on a SSRF or a RCE. I’m far from knowing everything, but digging into an application until it gives up is one of my favorite hobbies :)

I decided to create this website in order to share my passion through some things like write-ups and tools :)

You can find me on multiple platforms:

• Intigriti
• HackerOne
• YesWeHack
• Bugcrowd
• Yogosha

You can reach me at kuromatae (at) hakisec (dot) eu for collaborations, missions or private programs.