◎
Penetration Testing
Web · API · Network · Infrastructure
ETHICAL HACKER · SECURITY RESEARCHER · CYBERSECURITY PRACTITIONER
Stephanus
Sunarto Purnomo
Offensive Security. Vulnerability Research. Real-World Impact.
Hands-on cybersecurity practitioner focused on finding vulnerabilities, validating real risk, and helping organizations build stronger defenses.
$ whoami
stephanus
$ mission
find · validate · secure
$ focus
offensive security
$ status
● ACTIVE / RESEARCHING
$ _
> /rootHACK · RESEARCH · SECURE
500+++Security research / web compromise experience*
1000+Vulnerabilities & security findings*
10+National media features
4+Professional certifications
01 / PROFESSIONAL PROFILE
Curious mind.
Hacker at heart.
Technical depth, responsible disclosure and practical security impact.
I am a cybersecurity practitioner, ethical hacker and researcher with a strong interest in offensive security and vulnerability discovery.
My work covers penetration testing, vulnerability assessment, security operations, SIEM, infrastructure security, security research, cybersecurity awareness and information security governance.
02 / OFFENSIVE SECURITY
Think like
an attacker.
Security testing from reconnaissance through proof-of-concept and remediation guidance — within authorized scope.
⌁
Web Exploitation
SQLi · XSS · SSRF · LFI · RCE research
◈
Vulnerability Research
Finding, validating and understanding security flaws
⌘
Red Team Thinking
Adversary simulation and attack-path analysis
◌
Post-Exploitation Analysis
Privilege, persistence and impact assessment
▤
Reporting & Remediation
Evidence-driven findings and practical fixes
RECON→ENUMERATE→VALIDATE→EXPLOIT→REPORT→REMEDIATE
03 / RESEARCH
Security research
with purpose.
Responsible Disclosure
Security findings submitted through vulnerability disclosure programs and coordinated channels.
Application Security
Research across web applications, APIs and exposed attack surfaces.
Security Operations
Practical work with SIEM, endpoint visibility, monitoring and incident response.
Information Security
Risk management, awareness and ISO 27001 / ISMS work.
04 / ACHIEVEMENTS
Evidence over
empty claims.
Security Research / VDP
Responsible disclosure and security research.
Letters of Recognition
Recognition from security disclosure programs.
Media Features
National media appearances and coverage.
Cybersecurity Education
Teaching, mentoring and awareness activities.
05 / CREDENTIALS
Credentials that
back the craft.
CEHCertified Ethical Hacker
CPENTCertified Penetration Testing Professional
MTCNAMikroTik Certified Network Associate
MTCSEMikroTik Certified Security Engineer
06 / VISUAL ARCHIVE
Work.
Events. Research.
Click a photo to view it larger. Swipe or use the arrows to browse the archive.
DRAG / SWIPE · CLICK TO OPEN
07 / CONTACT
Let's make security
matter.
For authorized penetration testing, cybersecurity research, speaking, mentoring and professional collaboration.
stephanus.sunarto.purnomo@gmail.com