█████╗ ██╗███╗ ███╗ █████╗ ███╗ ██╗ ███████╗ █████╗ ███╗ ███╗ ██╔══██╗██║████╗ ████║██╔══██╗████╗ ██║ ██╔════╝██╔══██╗████╗ ████║ ███████║██║██╔████╔██║███████║██╔██╗ ██║ ███████╗███████║██╔████╔██║ ██╔══██║██║██║╚██╔╝██║██╔══██║██║╚██╗██║ ╚════██║██╔══██║██║╚██╔╝██║ ██║ ██║██║██║ ╚═╝ ██║██║ ██║██║ ╚████║ ███████║██║ ██║██║ ╚═╝ ██║ ╚═╝ ╚═╝╚═╝╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝ ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝
I am Junior Penetration Tester and Security Engineer. Top 1% globally on TryHackMe (350+ rooms, ranked 44th in Malaysia). 2nd Place UMCS Attack & Defense CTF 2026, 3rd place Bingo CTF 2025. CPTS and CEHv13 certified. Currently completing Bachelor of Computer Science (Cybersecurity) at UNITEN with 3.80 GPA.
I build tools that test security — both offensive and defensive — and break things to understand how they hold up. Zero trust by default.
Currently focused on:
- Red team tooling — C2 agents, EDR evasion research, post-exploitation concepts (authorized testing only)
- Web security — 10 CTF challenges built, vulnerability research, exploit development
- Security automation — 5 Python toolkits for phishing analysis, network monitoring, vuln scanning, log analysis
- Cyber ranges — Proxmox-backed drill platform (OXBLOOD-DRILL) for repeatable red/blue team exercises
- Systems programming — Rust for lower-level EDR evasion research
Also: 2 technical talks delivered (DIV:IDE Academy, Hack@10 CTF prep). 10 CTF challenges published across divideCTF.
| Project | Description |
|---|---|
| jebat | Discord bot for remote command execution — authorized administrative control from Discord. |
| badang | EDR Evasion Research Toolkit — Rust. Windows syscall-level research, injection techniques, unhooking, API detection. For authorized security research. |
| Project | Description |
|---|---|
| divideCTF-docker | Collection of 10 self-contained web security CTF challenges — SQLi, XSS, access control, file handling, auth flaws, logic vulns. Docker Compose for local practice. |
| durian | Lightweight web vulnerability scanner — SQLi, XSS, path traversal, sensitive files, session handling. |
| Project | Description |
|---|---|
| siem-lite | Log analysis and security incident detection toolkit — parses logs, detects anomalies, generates alerts. |
| packet-capture | Network packet capture and analyzer — raw sockets, capture, filter, analyze traffic. |
| port-scanner | Network port scanner — concurrent scanning, service detection, risk assessment. |
| password-auditor | Password security auditor — strength analysis, pattern detection, keyboard walks, entropy estimation. |
| lekir | Threat intelligence digest — stay updated on security news while you wait for coffee. |
| Project | Description |
|---|---|
| OXBLOOD-DRILL | Proxmox-backed cyber drill platform — repeatable red-team and blue-team exercises, scenario management, Prometheus/Grafana telemetry, Flask + FastAPI. |
| cyber-project-workspace | Workspace template for organizing authorized cybersecurity projects across red-team testing, blue-team detection, labs, and reporting. |
| Project | Description |
|---|---|
| termart | Render any image as ANSI half-block art in your terminal. One command, zero setup. Pure Python. |
| microjq | Minimal jq-like JSON query tool in Python. Filter and transform JSON from the CLI. |
| vizdiff | Visual diff tool in Python. Compare files, directories, and JSON with color-coded output. |
| vizkit | Terminal visualization toolkit in Python. Charts, tables, and formatted output for CLI apps. |
| devtool | Developer utility toolkit in Python. Small CLI tools for common dev workflows. |
| Project | Description |
|---|---|
| ukhuwah-siber | Discord bot for cybersecurity community engagement with minigames. |
| phishing-toolkit | Phishing email analysis toolkit — parse headers, body, URLs, attachments for indicators. |
| portfolio | Personal portfolio — junior pentester & web developer showcase with security writeups, 9 projects, and Decap CMS-powered blog. Live at portfolio.aimansam.my. |
Full repo list: aimansam GitHub
Languages: Python, Rust, Bash, JavaScript, HTML/CSS
Platform: Linux, Kali, Windows internals (EDR evasion research), Docker, Proxmox VE
Domain: Red team tooling, EDR evasion research, web application security, network security, phishing analysis, password security, log analysis, CTF development, detection engineering
Tools: Git, Docker, Nuitka (Python → native binary), Discord API (raw HTTP, no library dependency), Cloudflare Pages
GitHub: github.com/aimansam
Portfolio: portfolio.aimansam.my
TryHackMe: tryhackme.com/p/zx10r
Hack The Box: app.hackthebox.com/users/2188751
Certifications: HackTheBox CPTS, EC-Council CEHv13
Focus: Authorized security testing, offensive security tooling, web security, EDR evasion research, detection engineering.
