Remmy9
Full-time bug bounty hunter focused on web applications. I find vulnerabilities that matter, build tools that help other researchers work faster, and write about what I learn along the way. This site is a collection of field notes, techniques, and writeups from real hunts.
Research
Web application security — finding chains, not just bugs.
Writeups
Detailed breakdowns of real vulnerabilities, from discovery to impact.
Tools
Scripts and workflows that make recon, testing, and reporting faster.
Background
I started in bug bounty programs, spending years hunting vulnerabilities across public and private platforms. That grind shaped how I think — find edge cases that scanners miss, chain low-severity issues into real impact, and communicate findings clearly.
Today I hunt full time. I've reported 15+ critical and high-severity findings across web applications. Every hunt reinforces the same lesson: the most dangerous vulnerabilities aren't the most complex — they're the ones hiding in assumptions.
Connect
Find me on GitHub for tools and experiments, or on X for shorter notes and research updates.