Independent security research
YAOUNDÉ, CAMEROUN
CYPHERWARDEN
Break it first. Then guard it.
A field notebook by Romeo Koati
Security,
at code level.
I’m Romeo Koati, an independent developer and bug bounty hunter. Here I document what a test reveals, how to reproduce it, and what closes the vulnerability.
Tests on authorised targets. Findings disclosed after remediation and approval.
The domain index
Seven ways into the system
Where do you want to look?
An agent, a phone, a contract, a connected device. The target changes. The test still has to explain what went wrong.
Labs, tools & referencesFrom the notebook
Videos & written reports
The work, documented.
On screen
All videosThe first page is still blank.
No video has been published here yet. Episodes will appear with their commands, chapters and sources.
Find the channel on YouTubeIn writing
All reportsPublication policy
Disclosure comes after the fix.
No public report yet. Findings are shared once the vulnerability is fixed and disclosure is approved by the programme.
Read the disclosure policyThe rule behind the notebook
A test has a scope.
A finding has a fix.
Labs, CTFs, my own devices, and bug bounty programmes within scope. Each demonstration ends with what a developer can change to close the breach.
Ethics & responsible disclosure