見えない脆弱性を斬る技術者

Offensive Security Engineer — Red Team · Pentest · Exploit Dev

Muhammad Sulthon Nurbahari (SAVEHEX) — silhouette portrait with red rim light
攻撃は最大の防御

About — 自己紹介

I lead red team operations and penetration tests across web applications, APIs, internal networks, and Active Directory environments. My work combines adversary simulation, exploit development, and clear remediation guidance to turn real attack paths into stronger defenses.

  • 100+Machines Pwned
  • CTFPlayer
  • Bug BountyHunter

Arsenal

  1. 01

    Web & API Pentesting

    Finding the paths normal scanners miss.

  2. 02

    Active Directory & Internal Network

    Mapping trust, privilege, and lateral movement.

  3. 03

    Red Team Operations

    Simulating the adversary from initial access to impact.

  4. 04

    Exploit Development

    Turning bugs into reliable proof of risk.

  5. 05

    Android & iOS Reverse Engineering

    APK/IPA teardown, hooking, and app abuse paths.

  6. 06

    Cloud Security

    Testing identity, permissions, and exposed infrastructure.

  7. 07

    Satellite & RF Exploitation

    Downlink interception, SDR, and ground-station attacks.

  8. 08

    AI / LLM Red Teaming

    Jailbreaks, prompt injection, and model abuse paths.

Writeups

Medium Blog

  • Personal
  • Technical
  • Thoughts
Read on Medium

CTF Writeup

  • CTF
  • Web
  • Crypto
Read More

Security Tool

  • Python
  • Automation
  • Recon
Read More

Contact — 連絡

Send Message

攻撃は最大の防御