Skip to content
View ZeroX-404's full-sized avatar
๐ŸŽฏ
Focusing
๐ŸŽฏ
Focusing

Block or report ZeroX-404

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please donโ€™t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this userโ€™s behavior. Learn more about reporting abuse.

Report abuse
ZeroX-404/README.md

Hi there, I'm Epenetus Matias Putra ๐Ÿ‘‹

ZeroX-404 โ€” Security Researcher | Penetration Tester | Bug Hunter

Portfolio LinkedIn HackerOne Instagram


๐Ÿ›ก๏ธ About Me

Mahasiswa Teknik Informatika di Universitas Trunojoyo Madura dengan pengalaman hands-on dalam vulnerability research & responsible disclosure melalui Google OSS VRP, Microsoft MSRC, HackerOne, dan Bugcrowd.

  • ๐ŸŒ Diakui oleh Apple Security, NASA, U.S. DoD, UNESCO
  • ๐Ÿ† Top 20 Nasional โ€” VVIP Program BSSN RI 2025
  • ๐Ÿฅˆ Finalis CyberJawara 2026 โ€” Universitas Pertahanan RI
  • ๐Ÿ“ Based in Blora, Jawa Tengah, Indonesia
  • ๐Ÿ’ผ Open untuk Web App Pentest, API Security Assessment, & konsultasi bug bounty private

"Repetitive until it becomes technique."


๐Ÿ… Hall of Fame & Recognitions

Organisasi Pencapaian
๐ŸŽ Apple Security CVD โ€” March 2026
๐Ÿš€ NASA VDP Hall of Fame
๐Ÿ‡บ๐Ÿ‡ธ U.S. DoD Triaged & Resolved
๐Ÿ“š UNESCO XSS Acknowledgment
๐Ÿ‡ฎ๐Ÿ‡ฉ BSSN RI Top 20 VVIP (45 Pts)
๐Ÿ”“ Google OSS VRP Accepted & Merged Fixes
๐Ÿ›ฐ๏ธ Wazuh SIEM/XDR Issue #38595 โ€ข PR #38625
๐Ÿข 15+ CSIRT RI DKI, DIY, detikcom, dll.

๐Ÿ”ง Security Tools & Research

  • BugHunter Pro โ€” Chrome Extension untuk token interception & deteksi otomatis IDOR (JavaScript Manifest V3)
  • Recon Automation Toolkit โ€” Pipeline recon berbasis AI untuk attack surface triage (Python Bash Subfinder Nuclei)
  • Google OSS Security Contribution โ€” Kerentanan pada library open-source Google, accepted & merged (Java Android SDK)
  • BSSN VVIP Vulnerability Identification โ€” 3 laporan tervalidasi (2 High, 1 Critical), 45 poin

โš”๏ธ Weapons of Choice

Burp Suite Caido Nuclei FFUF httpx Subfinder Nmap Hashcat

Languages & OS

Python C Bash JavaScript Arch Linux Docker Git SQL


๐Ÿ“Œ Experience & Track Record

  • 2024 โ€” Present ยท Independent Security Researcher / Bug Bounty Hunter โ€” Google OSS VRP, MSRC, Apple, NASA, DoD, HackerOne, Bugcrowd
  • 2026 ยท Finalis Nasional CyberJawara โ€” Universitas Pertahanan RI (Unhan)
  • 2025 ยท Peserta VVIP Program Identifikasi Kerentanan โ€” BSSN RI (Top 20 Nasional, 45 Poin)

๐ŸŽ“ Education

  • Universitas Trunojoyo Madura โ€” S1 Teknik Informatika (2026 โ€” Present)
  • SMA Negeri 2 Cepu, Jawa Tengah (2023 โ€” 2026)

๐Ÿ“Š GitHub Stats

GitHub Stats GitHub Streak


๐ŸŽฎ Outside the IDE

Saat rehat dari terminal fuzzing dan analisis lalu lintas Burp Suite: kompetisi OSINT CTF, eksplorasi specialty coffee di Jawa Tengah, gym, dan menjelajahi kota-kota baru. โ˜•๐Ÿ‹๏ธโœˆ๏ธ


๐Ÿ“ฌ Let's Work Together

Tersedia untuk Web App Pentest, API Security Assessment, audit kode keamanan, serta konsultasi bug bounty private.

Email

Pinned Loading

  1. xss-scanner-zero xss-scanner-zero Public

    tujuan tools xss ini hanya untuk menemukan kerentanan pada suatu website saja dan tools ini tidak di gunakan untuk aktivitas ilegal dan pembuat tools tidak akan bertanggung jawab

    Python 1

  2. Epensite Epensite Public

    HTML 1

  3. Nuclei-Menu-AI Nuclei-Menu-AI Public

    Python 1

  4. recon_bughunter recon_bughunter Public

    HTML 1

  5. zenkomik zenkomik Public

    TypeScript 1

  6. ZeroX-404 ZeroX-404 Public

    1