Epenetus Matias Putra

Blora, ID • @ZeroX-404 •

Security Researcher | Web Application Penetration Tester | Bug Hunter

Listening to: Resonance — HOME

Mahasiswa Teknik Informatika di Universitas Trunojoyo Madura dengan pengalaman hands-on dalam vulnerability research & responsible disclosure melalui Google OSS VRP, Microsoft MSRC, HackerOne, dan Bugcrowd. Mendapat pengakuan keamanan dari Apple Security, NASA, U.S. DoD, UNESCO, serta menempati posisi Top 20 Nasional VVIP BSSN 2025 dan Finalis CyberJawara 2026 di Unhan RI.

Get in Touch

Security Milestones • Global Disclosures

Apple Security & NASA VDP Acknowledged

Officially credited for web service vulnerabilities & responsible disclosure.

Hall of Fame & Recognitions

Verified Disclosures

Proof

Apple Security

March 2026 CVD • View Proof

Proof

NASA VDP

Hall of Fame • View Proof

Proof

U.S. DoD

Triaged & Resolved • View

Credit

Wazuh SIEM / XDR

Issue #38595 • PR #38625

Proof

UNESCO

XSS Acknowledgment • View

BSSN RI

Top 20 VVIP (45 Pts) • View

Google OSS VRP

Accepted & Merged Fixes • View

15+ CSIRT RI

DKI, DIY, detikcom, etc.

CyberJawara '26

National Finalist @ Unhan

Security Tools & Research

04 Selected

BugHunter Pro

Token Interception & IDOR

Extension

BugHunter Pro — Chrome Extension

Browser extension untuk security testing: interception token otorisasi, penanganan multi-akun paralel, dan deteksi otomatis celah IDOR.

JavaScript • Manifest V3 • Web Request

recon.sh / recon.py

AI-Assisted Attack Surface Triage

Pipeline

Recon Automation Toolkit

Pipeline reconnaissance berbasis Python dan Bash dengan analisis AI untuk memetakan attack surface dan menyaring target secara presisi.

Python • Bash • Subfinder • Nuclei

Google OSS VRP

Accepted & Merged Security Fix

Upstream Patch

Google Open Source Security Contribution

Melaporkan kerentanan pada library open-source Google yang diterima resmi (accepted) dan menghasilkan pull request perbaikan yang di-merge.

Java • Android SDK • Google VRP

BSSN Program VVIP 2025

Top 20 Nasional • 45 Points

National

Identifikasi Kerentanan VVIP BSSN

3 laporan kerentanan tervalidasi (2 High, 1 Critical) dengan total 45 poin, mengamankan posisi Top 20 nasional selama program berlangsung.

Web Security • API Security • BSSN

Technical Rig & Stack

Weapons of Choice

Offensive & Defensive Security Tools

Burp Suite Pro

Caido

Nuclei

FFUF & Dalfox

httpx & Katana

Subfinder & Amass

Nmap & Masscan

Hashcat & John

Burp Suite Pro

Caido

Nuclei

FFUF & Dalfox

httpx & Katana

Subfinder & Amass

Nmap & Masscan

Hashcat & John

Languages & Operating Systems

Python 3

C Language

Bash Scripting

Arch Linux

Windows / WSL2

Git & Docker

JavaScript

SQL & NoSQL

Python 3

C Language

Bash Scripting

Arch Linux

Windows / WSL2

Git & Docker

JavaScript

SQL & NoSQL

Experience & Track Record

Timeline

2024 — Present

Independent Security Researcher / Bug Bounty Hunter

Vulnerability research pada Google OSS VRP, Microsoft MSRC, Apple, NASA, DoD, HackerOne, dan Bugcrowd. Menginvestigasi attack surface web/API, IDOR, path traversal, dan client-side security.

HackerOne Bugcrowd Google VRP NASA VDP

2026

Finalis CyberJawara 2026 di Universitas Pertahanan (Unhan RI)

Terpilih sebagai finalis tingkat nasional dalam kompetisi keamanan siber bergengsi CyberJawara untuk memperebutkan peringkat teratas nasional.

Finalis Tingkat Nasional

2025

Peserta VVIP Program Identifikasi Kerentanan — BSSN RI

Menyampaikan 3 laporan tervalidasi (2 High, 1 Critical), meraih 45 poin dan posisi Top 20 nasional.

Top 20 Nasional 45 Poin

Education

2026 — Present

Universitas Trunojoyo Madura

S1 Teknik Informatika • Mahasiswa

2023 — 2026

SMA Negeri 2 Cepu

Jawa Tengah • Sains & Teknologi

Outside the IDE

Saat rehat dari terminal fuzzing dan analisis lalu lintas Burp Suite, saya mengisi energi dengan kompetisi OSINT CTF, eksplorasi kopi lokal di Jawa Tengah, sesi gym, serta perjalanan menjelajahi kota-kota baru.

OSINT CTFs Specialty Coffee Gym Travel

Blora • Madura