┌──(christbowel㉿kali)-[~]
└─$ cat about.txt
Name : Christ Bowel Bouchuen
Age : 19
Location : Darmstadt, Germany
Uni : TU Darmstadt — B.Sc. Computer Science
Focus : Offensive Security | Vulnerability Research | Bug Bounty
CVEs Discovered : 3
Hall of Fames : 5 (🇺🇸 State of California · 🇩🇪 Deutsche Telekom · 🌍 Mars VDP · 🇦🇺 RMIT · 🇺🇸 BIA)
CTF Best Rank : Top 15/454 — Bugcrowd Black Hat USA CTF 2024 && Top 1 - USD Hacking Night
Status : Open for Werkstudent (Pentest / Vuln Research · Darmstadt/Frankfurt or Remote)
|
Host Header Injection → RCE Exploitable Host Header Injection in the |
Authentication Timing Attack → Username Enumeration Timing side-channel in the authentication flow enabling remote username enumeration - discovered and responsibly disclosed.
|
| CVE | Target | Contribution |
|---|---|---|
| CVE-2023-25136 | OpenSSH 9.1 | Python mass scanner + exploit framework — widely adopted by the community |
| CVE-2024-25600 | WordPress Bricks Builder | Official Nuclei template (2 versions) merged by ProjectDiscovery |
| Organization | Finding | Year |
|---|---|---|
| 🏛️ State of California · via Bugcrowd | SQL Injection → RCE → NT AUTHORITY\SYSTEM |
2024 |
| 🏛️ Bureau of Indian Affairs (BIA) | Multiple critical vulnerabilities on federal systems | 2023 |
| 🌍 Mars Vulnerability Disclosure Program | IDOR + Client Information Disclosure + Client-Side Validation Bypass | 2025 |
| 🎓 RMIT University · Australia | Responsible disclosure | 2023 |
|
Red Team Input Monitoring Framework · Stealthy input surveillance tool for security research. Captures keystrokes, clipboard data, screenshots, and system info — exfiltrates securely via Telegram bot. |
RSA Exploitation Framework · Analyzes and exploits weak RSA keys via factorization attacks and weak key detection. Built for CTFs and real-world pentest scenarios. |
|
Offensive Simulation Toolkit Payload generators, privilege escalation helpers, persistence techniques — full adversary simulation framework.
|
Defensive Analysis Companion Log analysis, anomaly detection, and automated detection rule generation. The defensive counterpart to RedTeamer. |
Languages
Tools
Domains
Web Security · API Penetration Testing · Active Directory · Network Security
Exploit Development · Reverse Engineering · Cryptanalysis · Bug Bounty · CTFs
| Certification | Issuer | Date |
|---|---|---|
| usd Hacking Night – Ethical Hacking Skills | usd AG | Nov. 2025 |
| Certified AppSec Practitioner (CAP) | The SecOps Group | Feb. 2023 |
| API Security Penetration Testing | APIsec University | Jan. 2024 |
| CompTIA PenTest+ Learning Path | TryHackMe | Apr. 2023 |
| AZ-500: Securing Data & Applications | Microsoft | Apr. 2023 |
🥇 1st Place — usd Hacking Night CTF, Nov. 2025
