I am a senior security specialist who is passionate about information security, especially in the area of web and network penetration testing. I obtained OSCP, OSWP and OSWE certifications in six months and I also held a standing record on Hack-the-Box and identified more than 5 Common Vulnerabilities and Exposures (CVE) within my first full-time career year.
I'm truly passionate about my work and always eager to connect with other pentesters. While I enjoy all aspects of my job, I think my favorite part of my job is identifiying unknown vulnerabilities and writing a profession report for our clients.
Projects completed
Cup of green tea
Fantastic friends
Rewards
• Penetration Testing Web Applications.
• Penetration Testing Mobile Applications.
• Penetration Testing Database and Servers.
• Penetration Testing Infrastructures & Network.
• Penetration Testing Cloud and others.
• Penetration Testing Web Applications.
• Penetration Testing Mobile Applications.
• Penetration Testing Database and Servers.
• Penetration Testing Infrastructures & Network.
• Penetration Testing Cloud and others.
• Penetration Testing Web Applications.
• Penetration Testing Mobile Applications.
• Penetration Testing Database and Servers.
• Penetration Testing Infrastructures & Network.
• Penetration Testing Cloud and others.
• Penetration testing Web Applications, Mobile Application and APIs.
• Black box testing Web Applications security issues; For example, SQL Injection, XSS and XXE etc.
• Design and deploy security policies on the cloud environment, include two-step authentication, user management, user privilege control.
• Design and Deploy Vulnerability Scanner and 3rd party packages scanner for Dockers, cloud, servers and databases.
• Management System.
• Penetration testing Web Applications, Mobile Application and APIs.
• Black box testing Web Applications security issues; For example, SQL Injection, XSS and XXE etc.
• Design and deploy security policies on the cloud environment, include two-step authentication, user management, user privilege control.
• Design and Deploy Vulnerability Scanner and 3rd party packages scanner for Dockers, cloud, servers and databases.
• Management System.
• Penetration testing Web Applications, Mobile Application and APIs.
• Delivered workshops of varying content.
• The topics included: Web Security, Signal Security and WIFI Security.
• Based on the topics to create PPT and workshop experiment and practice exercises.
• Delivered Security knowledge to the club members.
• Based on the topics to create PPT and workshop experiment and practice exercises.
• Penetration Testing Web Applications.
• Web Programing.
• Java Programing.
• Artificial Intelligence.
• Algorithms and data structures.
Report a Hidden Functionality vulnerability to D-Link.
Report an Improper Authentication vulnerability to D-Link.
Report an Insufficient Authentication vulnerability to D-Link.
Report a FTP Misconfiguration vulnerability to D-Link.
Report an Information Leakage vulnerability to D-Link.
Contributed OWASP Mobile Application Security Verification Standard (MASVS) official document.
Report an information disclosure vulnerability to Oracle.
Report a Search Results Web results Cross Site Scripting (XSS) vulnerability to Oracle.
Report a Server-Side Request Forgery (SSRF) vulnerability to Oracle.
I gave a presentation regarding a vulnerability that I found and published earlier in the year, on a conference media device. The presentation included how I bypassed restricted use of special characters, the challenges involves and how I ended up exploiting the command injection.
Report a remote OS Command Injection vulnerability to HARMAN.
I delivered a guest lecture in RMIT university.
Delivered a presentation to a country's Government Department of Defence.
Nginx and Linux Log Forensics for an Australia start-up company.
Report a file upload issue to Kentico CMS.
Reached Top100 in Hack-the-Box.
Report security issues to Telanto.com.
Won the first prize in the CTF game in 2018.
Report a system security issue to RMIT University.
Won the 5th prize in the CTF game in 2017.
Report a CTF Game security issue.
Won the 14th prize in the game.
Report a security vulnerability to iFixIt.com.
Won the 28th prize in the game.
