About
im a baby snowboader, and imma get that red bull sponsorship within 20 years.
btw another one is to live a comfortable life as an investment ai agent
Work Experience
-
2026.02 ~ PresentResearcher, @Dreamhack (Theori)- Offensive security content authoring
- Web/Web3 wargame and CTF challenge authoring -
2022.04 ~ 2026.01 (3 yrs 10 mos)- Web/Android vulnerability research
- Black-box web/mobile pentesting
Research
- Short Journey Web3 Audit ContestVulns
- LFI via XSS in h2o-3, ML Framework (Internal ML Model leak) $10,890
- URLParserCon — URL parser bugs → SSRF, XSS, Open Redirect $4,170
Bug Bounty
Remote Code Execution in PSA NASAWrite Up
XSS Sanitizer flaw in outlook
Leaked all write ups via IDOR in dreamhack.io $500
NBB-2081, NBB-2082, NBB-2083, NBB-2153, NBB-2256, NBB-2285, NBB-2286, NBB-2287, NBB-2292, NBB-2025-0162 $1,050
KVE-2021-1229, KVE-2021-1276, KVE-2021-1416, KVE-2021-1417, KVE-2021-1456, KVE-2021-1462, KVE-2021-1464 $1,600
CVE-2021-3815, CVE-2021-3829, CVE-2021-3831 ~ CVE-2022-21649, CVE-2023-1117, CVE-2023-6013, CVE-2024-57711, CVE-2025-62713, CVE-2025-66509 $15,513.5