Ammar Hakimi Adnan

Cybersecurity student in Malaysia. I profile threat actors, break web and Android apps with permission, and write down what I found.

Subject record

Studying

B.C.S. (Cybersecurity), Multimedia University. CGPA 3.81. Graduating February 2027.

Internship

Security Consultant Intern (Purple Team), Firmus Sdn. Bhd., Jul–Oct 2026. Threat intelligence on the ██████████████, black-box web and mobile testing, OSINT and attack surface mapping.

Recognition

Black Hat Asia 2026 scholarship. Project Nexus 2026, Top 10 in Healthcare. MCMC Nexsec 2026 CTF, Top 10. Dean’s List.

Community

Co-Lead I (first vice-president), GDGoC MMU. Built a forensics challenge for MMU’s first CTF.

Redacted text is under NDA. Select a bar to see how much I can say publicly.

Projects

• PROJ-01Autonomous Cloud-Native Red Teaming Capstone project. An agentic AI framework that maps IAM privilege escalation and S3 misconfiguration paths to MITRE ATT&CK Cloud and validates them with read-only techniques in a CloudGoat sandbox.AWS, Boto3, CloudGoat, Gemini API, ReAct
• PROJ-02Sentinel: Incident Management Portal Forensic data protected with Transparent Data Encryption and column-level encryption, threat-modelled with STRIDE and DREAD, with automated SQL auditing.MSSQL Server 2022, Python, Streamlit, pyodbc
• PROJ-03Corporate Data Breach Investigation Forensic analysis of a 5 GB disk image, 200+ artifacts, to reconstruct an internal data leak following NIST SP 800-86.Autopsy, The Sleuth Kit, Foremost
• PROJ-04Web Security and Infrastructure Hardening A TLS 1.3 internal web portal, audited with Nmap NSE, which found and fixed 5 critical issues such as open management ports and exposed directories.Apache2, OpenSSL, Nmap, GNS3
• PROJ-05Data Encryption Standard A 16-round DES implementation in Python, checked bit by bit against test vectors.Python

Case files

• CASE-ADead Drop Diagnostics A USB image, three escalating hints, and a flag hidden in image metadata.
• CASE-BMirror Image: NEXSEC 2026 cryptography. Recovering a 1024-bit secret hidden among 2¹¹² combinations with CRT and LLL.

Browse every case file, filterable by type

Certifications

• In progressMulti-Cloud Blue Team Analyst (MCBTA)CyberWarfare Lab
• In progressCertified Cybersecurity Analyst (C3SA)CyberWarfare Lab
• In progressSOC Level 1TryHackMe
• 10-2026Google Cybersecurity ProfessionalGoogle
• 09-2026Ethical HackerCisco

All certifications, with the certificates

Timeline

• 03-2024Started B.C.S. (Cybersecurity) at MMU.
• 10-2025Elected first vice-president of GDGoC MMU.
• 03-2026Black Hat Asia scholarship.
• 05-2026Designs the forensics challenge for HackPrep, MMU’s first CTF.
• 07-2026Started as a purple team intern at Firmus.

Terminal

Type help, or use the links below.