Cybersecurity portfolio

Azzam Azhim Muntazhar

CTF player and cybersecurity student focused on PWN, web exploitation, reverse engineering, and digital forensics.

psr354 / CTF-Player / Bug Hunter

View Achievements View Projects GitHub
psr354@kali:~$ whoami
psr354@kali:~$ cat focus.txt
PWN & Reverse Engineering
DFIR & Forensics
Web Exploitation
12verified achievements
3competition levels
6selected projects

About Me

Web Development Cybersecurity

I am a dedicated web development student with a strong foundation in HTML, CSS, JavaScript, and PHP. I have a deep interest in cybersecurity and actively participate in Capture the Flag (CTF) competitions to strengthen my vulnerability analysis and problem-solving skills. Disciplined and like to learn new things, I am comfortable working independently and collaborating within a team. I am committed to building web applications that are not only functional, but also secure by design.

Portrait of Azzam Azhim Muntazhar

Achievements & Competitions

1st Place

FGTE 0 CTF

Secured first place in the FGTE 0 CTF competition, held from March 7 to 14, 2026.

psr354March 14, 2026
View certificate
2nd Place

LKS Cybersecurity

Placed second in the Cybersecurity category of the East Jakarta City Student Competency Competition.

SMKN 40 JakartaApril 20–21, 2026
View certificate
2nd Place + First Blood

TryHards CTF

Won second place with team digendong kac0 and secured first blood on one of the hard challenges.

digendong kac0August 29, 2026
View certificate First Blood
2nd Place

Cyber Wave V2

Placed second in an online cybersecurity competition with team NR - Kata Fiko Ini Pendinginan Setelah LKS.

NR - Kata Fiko Ini Pendinginan Setelah LKSMay 3, 2026
View certificate
Finalist

Waskita Manunggal Siber 2026

Reached the open-category final with NR - Salazhar in the Indonesian Army Cyber Center CTF, where the final used a King of the Hill format.

NR - SalazharApril 16, 2026
View certificate
Finalist

Meta4sec 3.0 CTF

Selected as a finalist in the Meta4sec 3.0 CTF organized by Meta4sec in collaboration with Redlimit Academy.

katanya ikut aja duluAugust 28, 2026
View certificate
Top 10 Regional & National

Cyber Breaker 2026 - Season 3

With NR - Salazhar, placed 10th among 306 teams in the Java Regional round, then 10th among 33 teams at CBD National, qualifying for Promotion Day.

NR - SalazharMay 2–17, 2026
Regional National Promotion Day
5th Place

Astro Competition 7.0 CTF

As captain of team kata pak jum digendong tadeo, placed fifth with 5,700 points in the Capture The Flag category.

kata pak jum digendong tadeoDecember 5, 2025
View certificate Placement evidence
9th Place Internationally

Hackena Ramadan CTF

Team Salazhar placed ninth with 5,920 points in an international two-person CTF organized by Hackena and sponsored by the HackerOne Egypt Community.

NR - SalazharFebruary 20–March 10, 2026
Placement evidence
9th Place / Finalist

IONIC 2025 - Cyber Security

Team Salazhar placed ninth in the qualifiers and advanced as one of ten national finalists in the Cyber Security category.

Salazhar2025
View certificate Placement evidence
VDP

BMKG Vulnerability Disclosure

Recognized for responsibly reporting a security vulnerability through the BMKG vulnerability disclosure channel.

BMKG2026
View certificate
VDP

Jogja Vulnerability Disclosure

Recognized for responsibly reporting a security vulnerability through a Jogja vulnerability disclosure program.

Jogja2026
View certificate

Experience

  1. Education

    SMKN 40 Jakarta

    Software Engineering

    —

    Studying software development through structured coursework and practical projects, with a focus on programming fundamentals, web applications, databases, software engineering workflows, and secure coding practices.

    Software Engineering Web Development
    Show education details

    • Programming

      Builds responsive web interfaces and application features with HTML, CSS, JavaScript, and PHP. Applies programming fundamentals such as control flow, functions, data handling, debugging, and practical problem solving.

    • Database

      Understands relational database concepts and MySQL fundamentals, including table design, relationships, queries, filtering, and maintaining consistent application data.

    • WordPress

      Works with content management workflows, theme structure, page configuration, and practical website maintenance while keeping content organized and accessible.

    • Software Engineering

      Develops projects through requirement analysis, interface planning, implementation, testing, documentation, and iteration. Pays attention to maintainable code, collaboration, and secure-by-design application practices.

    • Organization

      Leader of the English Club and Cybersecurity extracurricular activities. Coordinates members, helps plan programs and learning sessions, communicates responsibilities, and supports collaborative activities within the school community.

  2. Internship Experience

    Kementerian Komunikasi dan Digital (Komdigi)

    Cybersecurity & Web Development Intern

    6 months

    Performed security testing as a penetration tester, developed web application requirements, and validated bug hunter reports as a triager.

    Penetration Testing Web Development Bug Bounty Triage
    Show internship details

    • Pentester

      Performed penetration testing across dozens of web applications, mobile applications, and APIs. Identified and validated vulnerabilities across critical, high, and medium severity levels, covering authentication, authorization, input validation, business logic, and other common application security weaknesses.

    • Bug Bounty Triage

      Validated hundreds of bug hunter reports by reproducing findings, confirming impact and severity, checking duplicates, and documenting evidence. Maintained a pace of up to three validated reports per day while following Komdigi's scope, disclosure, and handling rules in a workflow similar to HackerOne.

    • Web Development

      Developed the Komdigi CSIRT website and added features that streamlined the team's vulnerability validation workflow, making report review and validation more efficient.

Projects & Labs

rangeops

Docker-based infrastructure for SIEM (Wazuh), B2R, KOTH, and LabCTF, designed for building vulnerable labs and monitoring security events.

Docker SIEM Wazuh CTF B2R KOTH
GitHub

CTF Write-Ups

Documentation of my CTF journey, featuring exploitation analysis and solutions for every challenge I was able to complete.

Cryptography Reverse PWN Web Forensics
FGTE0 picoCTF

XI-RPL Calendar

An interactive web application for the XI RPL class that centralizes class schedules, assignments, and school events in one accessible calendar.

HTML/CSS JavaScript WebApp School Project
GitHub Demo

psr.fm

A lightweight self-hosted music streaming server that prioritizes user freedom, allowing users to deeply customize the experience, manage smart playlists, and stream personal music collections in the browser.

Python Flask Docker WebApp
GitHub

how-do-you-feel

An interactive web application for exploring acupuncture points based on everyday symptoms, featuring weighted queries and an interactive body map.

HTML/CSS JavaScript Health WebApp
GitHub Demo

TraceFund

A private Discord bot for personal finance tracking, with transaction history, budgets, reports, CSV export, historical data import, and Docker-based deployment.

Python discord.py SQLite Docker
GitHub
View more projects on GitHub

Skills & Tools

Security capabilities developed through CTF competition, hands-on labs, secure web development, and infrastructure projects.

01 / Primary focus

Core Competencies

Binary Exploitation

Analyzing memory corruption challenges and developing exploits with C, Python, pwntools, and pwndbg.

CPythonpwntoolspwndbg

Reverse Engineering

Inspecting program logic through static analysis, decompilation, debugging, and challenge-oriented code tracing.

GhidraStatic AnalysisDebugging

Web Security

Testing web applications and applying secure coding practices around access control, SQL injection, and XSS.

Burp SuiteNucleiOWASP Top 10

Digital Forensics & DFIR

Investigating network traffic and digital artifacts to reconstruct activity and extract evidence during CTF scenarios.

WiresharkTraffic AnalysisArtifact Analysis

02 / Operational toolkit

Applied Toolchain

Engineering & Automation

Building utilities, exploit scripts, web features, and repeatable command-line workflows.

PythonBashZshPHPJavaScriptGit

Offensive Testing

Supporting reconnaissance, validation, exploitation, and manual web security testing.

Burp SuiteNmapSQLMapMetasploitNuclei

Labs & Monitoring

Creating isolated security labs and observing events across containerized environments.

Kali LinuxDockerWazuhVirtualBox

Practice & Delivery

Sharpening practical skills and publishing technical work through accessible web platforms.

TryHackMeHackTheBoxGitHub Pages

03 / Professional context

Working Practices

Methods that connect competition experience with real-world security and software work.

  • Secure CodingInput handling, XSS and SQLi mitigation
  • Vulnerability TriageReproduction and bug report validation
  • Security MonitoringWazuh-based event visibility and lab analysis
  • Responsible TestingScoped testing and evidence-driven documentation
Applied in rangeops kalender-xi-rpl psr.fm

Contact Me

Open to discussing CTFs, security research, project collaborations, and learning opportunities.

GitHub LinkedIn Instagram Email