KHIDTISAK
PRAK CHUM
whoami
"khidtisak — cybersecurity enthusiast"
$ cat experience.txt
SOC Analyst Intern (L1/L2) at KWSP EPF — Digital Security Division. Real-time threat monitoring, incident response, EDR, phishing email triage & enterprise network protection.
$ cat mindset.txt
Offense-informed defense. HackTheBox & TryHackMe attacker mindset applied inside professional SOC operations to catch threats before they land.
$ # Top 3 National Polytechnic CTF 2025 · YTM Scholarship · 3.85 CGPA
flagged_projects
CraxTrap — Advanced Intelligence Honeypot
Final Year Project. Low-interaction honeypot built on Cowrie with a live web dashboard for attacker session replay, credential harvesting analysis, and password-spray pattern detection. Ships automated IP blocking and VPN-based pivot-safe deployment for deception inside real networks.
CTFd Challenge Solver Pipeline
Fully automated pipeline that spins up sandboxed environments, dispatches an agentic coordinator with parallel solver swarms against CTFd challenges, tracks cost and session state, and reports solved flags back to the board. Built to automate the boring parts of competition CTFs.
BadUSB Script & Keylogger Payloads
Authorized red-team research in a controlled lab. Developed human-interface-device attack scripts demonstrating how a $2 microcontroller can impersonate a keyboard, exfiltrate keystrokes, and bypass air-gaps — then documented the exact EDR and USB-policy controls that stop them.
KRemote — Cross-Platform Remote Connection Manager
Open-source connection manager for SSH, RDP, VNC, HTTP, and VPN, built with a Flutter UI over a Rust core handling crypto, networking, and protocol logic. Credentials sit in an Argon2id + AES-256-GCM encrypted vault, alongside a working SSH terminal, connection tagging/folders, and import/export — running on Windows, Linux, and macOS.
KhOS — Debian-Based Pentest & CTF Distro
A lightweight, Debian 12 distro with a Windows-style XFCE desktop, purpose-built for CTF players and reverse engineers. Pre-loaded with Ghidra, GDB, Pwntools, Nmap, Wireshark, Hydra, and Hashcat, tuned for a sub-500MB idle footprint with VM-ready display and clipboard integration out of the box.
Movie Hosting Platform — "4hik."
Self-hosted movie & TV streaming platform with a searchable catalog, genre and rating filters, watchlist management, and user accounts. Built end-to-end: media ingestion, backend APIs, and a dark-mode binge-friendly frontend.
breach_log
Top 3 — National Polytechnic Capture The Flag (PolyCC Cyber Warrior)
Back-to-back podium against polytechnics nationwide.
SOC Analyst Intern — KWSP EPF, Digital Security Division
Five months inside a national pension fund's SOC: EDR, phishing monitoring, real-time threat detection on critical infrastructure.
1st Runner-Up — Final Year Project (Information Security)
CraxTrap: Advanced Intelligence Honeypot. Awarded at Politeknik Ungku Omar for building a working, deployable deception platform.
Top 3 — National Polytechnic CTF (PolyCC Cyber Warrior)
First national podium, competing against polytechnics across Malaysia.
Top 2 — International Competitive Cyber Quest: CTF
International stage. Second place against regional teams.
Top 20 — International Battle of Hackers
First international CTF appearance. Top 20 finish.
Community
Speaker — ByteBot Annual Cybersecurity Meetup · Speaker — CSR Keselamatan Digital, PUO · Active member, Polytechnic Cybersecurity Club · YAYASAN TELEKOM MALAYSIA Scholarship holder.
toolkit --list
CompTIA Security+ (SY0-701)
CompTIA — 2025
IBM AI Fundamentals
IBM — 2025
Microsoft Student SOC Program — Foundations
Microsoft — 2025
IBM Cybersecurity
IBM
Bahasa Melayu · English · Siamese
all fluent
INITIATE HANDSHAKE.
// Interested to talk? Ways you can reach me: