Whoami
I work as a Cyber Security Consultant. I care about cybersecurity, GNU/Linux, and open source. Debian has been my daily driver since 2013. Outside the terminal I watch Neon Genesis Evangelion and My Hero Academia, and I still back the GOAT, Cristiano Ronaldo.
I first learned hacking on the Indonesian underground forum HN Community, once the largest hacker-newbie community in Indonesia.
Certifications
- OSEPOffSec Experienced Penetration Tester
- OSCPOffSec Certified Professional
- CRTPCertified Red Team Professional
- CARTPCertified Azure Red Team Professional
- PNPTPractical Network Penetration Tester
- eCPPTCertified Professional Penetration Tester
- CRTOCertified Red Team Operator
- eWPTXWeb Application Penetration Tester Extreme
- CAPCertified AppSec Practitioner
- CRTACertified Red Team Analyst
Community
Almost everything I know is self-taught, so I stay in the community. I am involved with ZeroByte.ID.
I write about cybersecurity, GNU/Linux, and open source on LinuxSec and Medium.
Labs
Between client pentests I keep a lab habit:
Open source
Most of what I publish is around cybersecurity:
- PAMnotify Telegram notifier via PAM sessions.
- TLDHunt Domain availability checker.
- AzSubEnum Azure service subdomain enumeration.
- scscanner_py Massive HTTP status code scanner.
The rest is on GitHub.
CVE research
I report vulnerabilities in open source software and get them assigned CVE IDs. 100+ CVEs credited so far:
Contact
Have a project in mind? Write me.