Hi 👋, I'm Masamune

Security researcher: web and application security, bug bounty, and CTF

• 🔭 Working at OPSWAT
• 🌱 Currently sharpening on Dreamhack
• 📝 I write at blog.masa.codes

Selected work

• bb-skill : a browser-first bug bounty hunting skill (Chrome and Burp MCP pipeline)
• CVE-2024-4367-Analysis : arbitrary JavaScript execution (XSS) in PDF.js
• mitsubishi-wireshark-plugin : Wireshark dissectors for Mitsubishi ICS protocols (MELSEC, SLMP, CC-Link IE Field)
• CVE-2024-32002-POC : RCE via malicious git submodule hooks on case-insensitive filesystems

Connect with me:

Languages and tools: