I'm a final-stage software engineering diploma student who learns by building complete systems and doing real security research — the certificates and CVEs just document the practice. My GitHub reflects two tracks that feed each other:
- Building — full-stack applications end to end: database schema, API design, auth, frontend, CI, documentation
- Breaking — CVE proof-of-concept research (CWE-59 path traversal, DoS analysis, auth bypasses), because understanding how systems fail is the fastest way to learn how they should be built
Systems built to production habits: transactions, RBAC, tests, CI badges, honest READMEs.
| Project | Stack | What it proves |
|---|---|---|
| 🏬 smart-inventory-erp | Node.js · React · MySQL · Bootstrap · Docker | Complete inventory ERP module: atomic stock movements (SELECT ... FOR UPDATE), PO receiving in single transactions, JWT + role-based access, Recharts dashboards, CI |
| 🎮 esports-arena | Node.js · Socket.IO · node:test |
Live tournament platform: pure single-elimination bracket engine (8 unit tests), real-time WebSocket brackets, global leaderboard |
| 🏥 claims-intel-api | C# · .NET 8 · EF Core · xUnit | Insurance claims intake with explainable fraud scoring (rule engine + reasons), enforced claim state machine, integration-tested |
| 📈 ai-demand-forecast | Python · scikit-learn · FastAPI | Demand forecasting: 61% MAE reduction vs naive baseline, leakage-safe features, FastAPI serving with reorder suggestions |
| 🛡️ Security research | Python · JavaScript | CVE PoCs: path traversal (CWE-59), DoS, auth issues — full disclosure workflow |
| Certification | Issuer | Evidence |
|---|---|---|
| 🛡️ PT1 — Junior Penetration Tester | TryHackMe (Sep 2026) | Certificate PDF · ID THM-69fd3c959aa0c9e61c800a98 |
Hands-on exam: network & web enumeration, exploitation, privilege escalation under exam conditions — the practical counterpart to the CVE proof-of-concept research in the featured projects above.
Languages · Python · JavaScript/TypeScript · C# · PHP · SQL
Backend · Node.js/Express · ASP.NET Core · FastAPI · REST · WebSocket · JWT auth · MySQL · MSSQL · EF Core
Frontend · React · Bootstrap · HTML/CSS · Recharts · vanilla JS
Data/ML · pandas · scikit-learn · feature engineering · model evaluation
Security · TryHackMe PT1 certified · CVE research · PoC development · OWASP mindset
Practice · Git · GitHub Actions CI · Docker · Swagger/OpenAPI
- Ship complete, not impressive-fragments. Every repo above has a schema or model, tests or CI, a README that explains why, and a roadmap that shows I know what's missing.
- Explainable over clever. My fraud scorer outputs reasons, not just scores. My READMEs document race conditions and why transactions matter — the questions seniors actually ask.
- Security is a habit, not a project. Parameterized queries, bcrypt cost 12, helmet, rate limits, input validation at the edge — defaults everywhere.
Email · chinyeezy08@gmail.com
Location · Kuala Lumpur, Malaysia