whoami

hi, security researcher based in tokyo. I’m interested in many things, on which i sometimes blog about.

cves

full list here.

• CVE-2026-41448 (9.4) auth bypass via path traversal in AdGuard Home
• CVE-2026-56115 (8.8) missing admin check in bootimus’ jwt middleware
• CVE-2026-3739 (8.5) idor on message threads in suitenumerique/messages
• CVE-2026-35025 (8.1) acl bypass in ProFTPD via a /proc/self/root prefix
• CVE-2026-23679 (6.2) null deref in libusb parsing malformed descriptors

freelance services

if you are looking to hire someone remotely, and your time is flexible, you should consider hiring me ! you can click here for more info

talks

• cool proftpd bugs, where i present CVE-2026-35025
• warcon 2024: automotive security
• malveillance max (2024, french)
• incognito 2023: car hacking 101 (read the blog post !)

ongoing public projects

• poking at the linux kernel, usb/ip lately -> the 1day i missed, then the one i didn’t
• working on a Linux kernel rootkit, and a c linux userland keylogger
• writing my own scanning tools for pentest & bug bounty, which can usually be found here or here
• researching network fingerprinting things. . . . stay tuned;D
• i also like to fuzz things sometimes
• hoarding a collection of french ezines

archived projects

• i used to play csgo. a lot
• worked on a pentest-automation dashboard for a school project
• maintained a shellcode loader in golang (read the blog post !) -> there is a v2 that i don’t maintain too seriously.
• wrote a golang google-dork automation tool
• maintained a CLI for pentest recon automation -> spiritual successor available here
• esp8266 packet sniffer that relays infomation over MQTT & detects deauth attacks (yes, it’s a bad idea)