Cybersecurity student at UOW/SIM with hands-on data center experience from Equinix and Alibaba Cloud, currently building OSCP-track skills in Singapore.
I focus on practical offensive security: Linux, enumeration, web exploitation, privilege escalation, and clear technical writeups. My infrastructure background taught me to care about reliability, procedure, and documentation, not just running tools.
Security tools and implementations I've built, all in standard-library Python.
| Project | Area | What it does |
|---|---|---|
| Auto OSCP Recon Notes | OSCP workflow | Turns local Nmap XML into plain-text notes, service checklists, and a report template for authorized labs |
| Intrusion Detection System | Anomaly detection | Learns a baseline from activity data, then flags days that drift too far using weighted deviations against a calculated threshold |
| Lamport OTP | Cryptography | Hash-chain one-time password scheme built from the ground up |
| TOTP Simulator | Cryptography | Time-based one-time passwords per RFC 6238 in standard-library Python |
- Working through OSCP-track material: enumeration, web app exploitation, buffer overflows, and privilege escalation
- Practising on Hack The Box and PortSwigger Web Security Academy
- Building small Python and Bash tools to cut the repetitive parts of recon and reporting
- Turning study work into clean public projects
- Add plain-text Nmap, ffuf, and gobuster imports to Auto OSCP Recon Notes
- Write short legal lab notes that focus on methodology and lessons learned
Python 路 Bash 路 Linux 路 Git 路 Nmap 路 Burp Suite 路 Gobuster 路 Hydra 路 Hashcat 路 gdb
My background is infrastructure operations at Equinix and Alibaba Cloud, where uptime, procedure, and documentation are not optional. I'm now building offensive-security fundamentals so I understand attacker behaviour and can contribute to practical defence.
rack -> linux -> scripts -> security notes -> better decisions
I'm aiming for junior cybersecurity, SOC, infrastructure security, or security engineering internship roles in Singapore.
Short version: real infrastructure experience, a deliberate security-first learning path, and the habit of automating and documenting technical work clearly. I'm early in offensive security, but I'm building in public and improving through practice.