Web & API Security
Testing web applications and APIs for auth flaws, IDOR, injection, upload issues, SSRF, and broken access control.
Cybersecurity portfolio + blog
BotNas Breaking targets down, tracking signals, and writing the path.
My experience spans offensive security, CTF challenges, and threat intelligence research, with notes that turn useful lessons into readable writeups.
HTBElite Hacker Lv 66 THMGuardian Lv 14 CTFTimeKH #2 / #744
Player Profile
Verified BotNas
Elite Hacker / Guardian / WillHack4Coffee / Komnot
Skill stack
Areas of focus.
Vulnerability Assessment
Mapping attack surface, validating weaknesses, prioritizing impact, and documenting findings clearly.
CTF
Solving pwn and web challenges, building repeatable exploit paths, and turning solves into readable writeups.
Threat Intelligence
Researching signals, public-source pivots, exposed infrastructure, adversary behavior, and clean investigation notes.
Credentials
My Credentials.
Achievements
Top 1- CTF
Cyber Arena 2026
WillHack4Coffee placed 1st in Cyber Arena 2026, an online CTF competition with 157 teams.
Top 1- CTFSieberrsec CTF 7.0
WillHack4Coffee placed 1st with 13,156 CTF points in Sieberrsec CTF 7.0, an online CTF competition with several teams.
Top 5- CTFKOH KER OSINT CTF 2025
I placed 5th in KOH KER OSINT CTF 2025, an in-person OSINT CTF competition.
Top 1- StartupFinclusion Innovate
Komnot placed 1st in the Finclusion Innovate Competition by presenting cybersecurity solutions that help people detect and avoid scams.
Top 2- StartupInnovative Tech Challenge Season 3
Komnot placed 2nd in Innovative Tech Challenge Season 3 by presenting cybersecurity solutions "Komnot App" that help people detect and avoid scams.
Final Round- StartupUN Cybercrime Hackathon
Komnot qualified for the final round in Hanoi, Vietnam by presenting cybersecurity solutions, "Komnot App" that help people detect and avoid scams.
Certification
Certified in Cybersecurity (CC)
Entry-level cybersecurity certification covering security principles, access controls, network security, and incident response fundamentals.
Builds a baseline across core security concepts: identity and access, network defense, risk, operations, and incident response.
View certificate
Projects
Projects in progress.
Basic Ransomware Simulation using AES and RSA algorithms
Demonstrate ransomware behavior with AES-based file encryption and RSA key protection, covering payload workflow, attack assumptions, and defensive measures.
Open ProjectBlog
Blogs and writeups.
Jun 27, 2026 / Pwn
OFF THE RECORD - Pwn Challenge Writeup
Cyber Arena 2026 - Pwn - Format string exploitation against a PIE binary: leak main, recover the PIE base, then read the hidden flag buffer with a controlled %s dereference.
Read writeup
Jun 27, 2026 / Pwn
PRESS F - Pwn Challenge Writeup
Cyber Arena 2026 - Pwn - Heap use-after-free in an encrypted protocol, recover a hidden keeper secret, and unseal the flag.
Read writeupContact
Links and contact.
Verified hack platform profiles, GitHub, and LinkedIn are the best contact paths for now.