Wzrd. — malware analysis and offensive security

I build and break systems to understand how they fail. My work centers on offensive security, DevSecOps, malware analysis, reverse engineering, CTF research, and practical vulnerability reporting.

Security research

• Breaking Down Discord Account Takeover from Low-level Perspective

  A runtime investigation of process hollowing, self-healing hosts, RC4-protected C2 traffic, anti-VM checks, and Discord credential theft.

• Dissecting a Fake Photoshop Setup.exe That Drops the Infostealer + RAT + Ransomware

  Unpacking a fake Photoshop installer, defeating its Go anti-analysis paths, recovering stolen browser data, and tracing encrypted exfiltration through TON DNS.

• Malware Analysis: Identifying Cryptominer in a Game Cheat Loader

  Following a fake Division 2 trainer through dynamic API resolution, evolving XOR keys, Defender tampering, process hollowing, and XMRig telemetry.

• Reverse Engineering Fake Phishing SiCepat App

  A brief security awareness & story about why you shouldn't trust stranger.

• How a Small Security Flaw Can Lead to Massive Data Breach

  Everything Online Is Vulnerable. This is how Attackers Exploit SQLi to Expose Your Personal Information

• Cyberbreaker CTF - Attack Session Writeup Documentation

  Solver scripts for Binary Exploitation and Web Security challenges

• Hacking all the things on Telkom University (Graduation Edition)

  As my journey ends, I'll leave my hat on Telyu.

• Patching a Video Game on Flareon CTF by Mandiant (Google Cloud)

  Learning assembly because i hate myself >:(

Cybersecurity projects

• Nonstop PWN & Reverse

  A challenge notebook for learning binary exploitation and reverse engineering through public CTF problems.

• Learn Low-Level Assembly

  Bilingual learning notes that connect assembly syntax, memory, registers, calling conventions, and Linux system calls.

• Tel-U Service Desk Breacher

  An archived Python CLI that documented broken authorization boundaries in a university service-desk workflow.

• Crime and Punishment

  A malware-analysis project focused on understanding execution, evasion, persistence, credential theft, and command-and-control below the network surface.