%******++++*#+ mahdi@codelines
*******+++++*= ────────────────────────────────
*******+****#+ OS: ............ Kali Linux, Windows
***********#*= Role: .......... Head of IT Security Division
***********#- Org: ........... CODELINES, UKM RIPTEK UNNES
****#***+=: Also: .......... Lab & Teaching Assistant, CS
***##**=. Dev.Focus: ..... Web Development, otw Fullstack
+*##***. Study: ......... Informatics Eng., Semester 5
*###***. :===-==== Universitas Negeri Semarang
#####*#+ ... .-=-.:=*-
#######* ::...:*=--+**:- Building: ..... FraudLens, AI fraud detection
##%%###*:.-===-=***+#%*-: in production @ BMT Insan Mandiri
*%%#####+::--::.-=*=+#*- Research: ..... Deep learning for fabric defect
#%%#**###+-::..:=++++*: detection (undergrad thesis)
#%##**#####:.:::-+**++
%###**#####=....:==+**. CTF.Categories: ...... pwn, web, crypto, forensics,
##****#####+....:=***+%= OSINT, RE, mobile, AD
####*##**####=:::=*=-%@@%+:. Languages.Code: ...... Python, C++, JavaScript, PHP
#%#####*###%%@#=::.-@@@%@@@%%*+-: Languages.Human: ..... Indonesian, English
%#######%##%%*+#+-##%@%@@@@%%#%%%%#+-
#%%%##*#%%%%%#%%#*@@##%@@@@@###%@%@@@ Hobby: ..... reading classical Arabic poetry (bilingual)
%%@%%#%#%%%%%@@@%%%#@%%@@@@@@@%%%@@@@
%%@%%#%%%@%%%%@@@%%@%%@@@@@%@@%#%@@@@ Contact
%#%@%%#%%@%%%%%@@@@@%%@@@@@@@@%%%@@@@ Email: ...... [email protected]
###@%%%#%@%%%%%@@@@%%%%@@%@@@@@%%@@@@ GitHub: ..... github.com/MahdiHbb1
I spend most of my time either breaking web apps and crypto challenges for CTFs, building full stack web apps end to end, or working on things that are supposed to stop other people from doing the same: fraud detection, defect detection, security tooling. The rest of my time is split between teaching, and reading/writing classical Arabic poetry, which has nothing to do with computers and I like it that way.
An AI based fraud detection system I designed and built, currently running in production at BMT Insan Mandiri, a financial cooperative. Not a notebook demo: it processes real transaction data and flags fraud patterns for an actual institution.
Alongside that: fabric-cnn, a dual-branch CNN (Sobel edge detection + RGB) for fabric defect detection on the AITEX dataset, part of ongoing computer vision research feeding into my undergrad thesis.
Active in web exploitation, cryptography, reverse engineering, and forensics:
NHNC 2026 TraceBash CTF 2026 Gemastik 2025 KTCG CTF 2026 GCW TCP1P
Currently deep in a Flask/ECDSA challenge involving biased-nonce lattice attacks on BrainpoolP512r1, alongside a confused-deputy web challenge. Writeups and a consolidated knowledge base (100+ challenges across RE, web, crypto, PWN, and AD attack chains) are being pushed here as they're cleaned up.
Fullstack projects outside the security track, mostly built to actually ship, not to sit in a portfolio:
- VetClinic-web-app: PHP clinic management system: appointments, medical records, inventory, Dockerized deployment.
- barbersync: Booking & queue management for a barbershop. Express 5 + SQLite + Tailwind/Alpine.js.
- JKommerce: React/Vite e-commerce platform for batik products: cart, wishlist, filtering, reviews.
- DDweb: Deployed storefront for a food & cake business with WhatsApp checkout.
