> For the complete documentation index, see [llms.txt](https://borgor-1.gitbook.io/borgorshop/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://borgor-1.gitbook.io/borgorshop/usdwhoami.md).

# $whoami

## About myself

APU alumni

CTF player for C0UGH1NGB4BY and T3ST1NG

Former Penetration Tester intern @ Maybank

Currently learning cloud, devsecops, home server (see [Projects](#projects)), automation, & AI

Check out my [LinkedIn ](https://www.linkedin.com/in/nelson-lee-610bb023b/)and my [Github](https://github.com/BogusForlorn/CTF_Writeups)

### Credentials

**Asia Pacific University of Technology & Innovation, Forensics & Security Research Centre - Student Section (FSec-SS)**\
\&#xNAN;*Secretary 2025*\
Coordinated CTF events (ICTF 2025 & BOH 2025) and workshops\
Made challenges (refer to [ICTF 2025](/borgorshop/events/global-cybersecurity-camp-gcc-2025-taiwan.md) and BOH 2025)\
\
\&#xNAN;*Vice-Secretary 2024*

**Global Cybersecurity Camp 2025 @ Taoyuan, Taiwan**\
\&#xNAN;*1 of 4 Malaysian student representatives*

**Payment Networks Malaysia (PayNet)**\
\&#xNAN;*Program AKAR, powered by AWS re/Start*\
Graduate (pilot cohort 2024)

### Capture the Flag history

* Wargames MY 2024\
  28 December 2024: 5th Place
* Hacktheon Sejong Group B Preliminary (International)\
  26 April 2025: 25th Place
* Blackberry Cybersecurity Centre of Excellence 1st Year Anniversary CTF\
  8 May 2025 @ BBCCOE: **Champion 🏅**
* University of Malaya Cybersecurity Summit (UMCS) 2025 CTF\
  17 & 18 May 2025 @ UM: **Champion 🏅**
* Universiti Teknikal Malaysia Melaka (UTeM) NETSA Skill Up Challenge CTF\
  24 May 2025 @ UTeM: 4th Place
* BarqSec CTF 2025\
  3 July 2025 @ APU: **Champion 🏅**
* Cyber Nexus "Lecture's Over, Time to Hack" CTF\
  28 August 2025 @ APU: **Champion 🏅**
* Sunway University College SunCTF 2025\
  30th August @ Jeffrey Cheah Hall: 9th Place
* CyberDSA Siber Siaga Capture the Flag: Code Combat 2025\
  Stage 1/Preliminary (Jeopardy): 3rd Place\
  Stage 2/Semi-Finals (Threat Intelligence): 2nd Place\
  Stage 3/Grand Finals (Attack & Defence): 3rd Place **🥉**
* My Hack 2025 Conference - Malware Village CTF (Reverse Engineering)\
  23 October 2025: 2nd Place **🥈**
* BarqSec X Exploit3rs - System Override CTF\
  1 November 2025: 4th Place
* Universiti Kuala Lumpur (UniKL) International Game of Hackers (iGOH) 2025\
  21 & 22 November 2025 - Preliminary: 14th Place\
  4 November 2025 - Finals @ UniKL: 6th Place
* CURTIN CTF v3.0 2025\
  6 & 7 December 2025: 2nd Place **🥈**
* Cyber Nexus Operation 0xCYNX 2026\
  17 January 2026: **Champion 🏅**
* Hacktheon Sejong Group B Preliminary (International)\
  25 April 2026: 18th Place
* University of Malaya Cybersecurity Summit (UMCS) 2026 CTF\
  16 May 2026 @ UM: **Champion 🏅**<br>

Total podium finishes: 6x Champion, 2x 1st Runner-up, 1x 2nd Runner-up, 1x 6th Place&#x20;

My write-ups can be found on my [GitHub](https://github.com/BogusForlorn/CTF_Writeups).

### Certifications

* Amazon Web Services (AWS)\
  \- Certified Cloud Practitioner (CCP): 2deda5e2ecfb418cb4405914c578bed2
* Cisco Certified Network Academy (CCNAv7)\
  \- Introduction to Networking (IN)\
  \- Switching & Routing Essentials (SRE)
* CompTia\
  PenTest+ PT0-003: 3f7da85ca30247719a14bd3192be990b
* CREST\
  CREST Practitioner Security Analyst: In progress
* Kumon\
  Mathematics Completor (Level-O) @ age 16\
  Advanced Student Honour Roll: Ranked 56 out of 519 (of Malaysian 15-year-olds: 5 years ahead of level)
* Postman \
  API 102X Fundamentals Student Expert: 662bbbb21bc4915ec0388dc0
* World Education Placement Service (WEPS)\
  Digital Payment & Banking Training (with PayNet)

### Projects

#### Final Year Project

"Integration of Artificial Intelligence for Dynamic Web Application Testing using PenAI"\
Semi-agentic, autonomous web pentesting application using APIs. It can invoke tools and pass arguments into your terminal.\
Made and finished before MCPs and Codex became popular.

#### Personal Projects

**Home server installation**

* i5 7200u with 12gb of RAM
* Kali Linux 2026.2 (6.19.14+kali-amd64); *used to be Tiny10 but Windows proved to be too resource intensive*
* Remote via Tailscale (VPN remote based on Wireguard)
* Running SambaSMB for NAS (1TB HDD + 256GB SSD)
* Running remote pentest agent & financial market dashboard aggregator&#x20;

**Pentesting Agent**

* Multi-model adversarial setup for maximum coverage
* Self-learning capabilities
* CLI-based design for RAG implementing MCP and Skills.md

**CI/CD Pipeline for Attack & Defence CTF**

* Automatically exploit challenges
* Self-evolving to improve exploits and payloads
* Automatic patching

**Multiple NIC Routing System**

* Designed for highly restrictive environments with DLP
* Allows access to internal network while still accessing internet

**Keyboards**

* Tactile enthusiast (Durock T1 filmed + lubed & frankenstein Boba U4Ts w/ 80g springs)
* Owner of 3 keyboards (don't ask me how much I've spent)

**PCMR**

* Built my own PC

**Car Enthusiast**

* Learning to fix my Saga FLX 1.3 2012
* Sometimes I go sideways (not by choice)
* Hopefully one day I'll get to try a B58 and K20

<br>