Security Audits
Comprehensive vulnerability assessments and penetration testing for your applications.
// security
available for freelance
$ whoami AryaKun
> IT Junkie / Cybersecurity Enthusiast / Builder
I break things to understand them, then build them better. 10+ years of tinkering with code, networks, and systems — turning curiosity into security tools, web platforms, and automation that actually ships.
- projects
- 50+
- clients
- 30+
- uptime
- 24/7
$ cat profile.txt
name: AryaKun
role: security engineer
base: Indonesia (UTC+7)
status: shipping things daily
$
01 / about
Hi, I'm AryaKun.
Hi, I'm AryaKun.
I make computers behave.
My journey started the way most do — breaking my own machines and having to fix them. What started as curiosity became an obsession with understanding how things work at the lowest level: packets, memory, syscalls, and every layer in between.
Today I split my time between offensive security (audits, exploit research, CTFs), engineering (Laravel, Go, Python — building tools that solve real problems), and teaching everything I learn along the way.
I believe in clean code, honest work, and sharing knowledge — because a rising tide lifts all ships, and the best security is a community that understands it.
clean_work()
Clean code isn't optional. It's the baseline.
fast_reply()
Straight to the point. No nonsense, no ghosting.
understand()
Your problem first. The solution comes second.
# quick facts, zero fluff
├─ focus : offensive security, appsec
├─ stack : Laravel, Go, Python, Docker
├─ creds : CNSP, CAPv2, C3SA, ISO 27001
├─ writes : technical blog
└─ coffee : dangerously high
$ git log --author="AryaKun" --oneline | head -3
a1f4c2e ship: security audit automation
9b3d81f fix: that one race condition (again)
4c7e05a feat: tooling for tired humans
$
02 / services
What I do for a living
From hacking your own stuff (with permission, obviously) to shipping production systems — here's where I add value.
Custom Development
Tailored web platforms and tools built with Laravel, Go, and modern infrastructure.
// buildConsultation
Stuck with confusing code or architecture? I'll untangle it and map a path forward.
// consultWriting & Docs
Technical articles, documentation, and educational content that people actually read.
// writethe 3H principle
Halal, Haram, Hantam — Legal, Illegal, Smash It.
Ethics apply. I know where the line is, and which side of it pays the bills.
halal
→
haram
→
hantam
03 / arsenal
Tools of the trade
Daily drivers in the terminal, on servers, and in production. Chosen for speed, reliability, and getting out of my way.
PHP
Laravel ecosystem
Go
cli + services
Python
automation + tooling
JavaScript
frontend glue
C++
low-level stuff
Docker
ship it anywhere
Linux
the daily OS
PostgreSQL
data, done right
04 / credentials
Certified, multiple times over
Paper doesn't make the hacker — but it doesn't hurt when your threat model needs receipts.
5 certificates and counting
05 / writing
cat /blog/index
Fresh from the lab
Exploit walkthroughs, tooling notes, and things I wish someone had told me earlier.
// no_preview.png
859 views
Get Free 96-Core VPS on GoogleColab
Learn how to turn Google Colab into a free VPS with up to 96 cores. Easy step-by-step guide with SSH access — no cost, just vibes!
// no_preview.png
843 views
Eksploitasi Unauthenticated CSRF File Upload pada CandySKL
Berikut adalah cara Eksploitasi Candy SKL CSRF File Upload yang tidak ter-otentikasi.
// no_preview.png
933 views
Easy Install Cisco Packet Tracer on Archlinux
Cisco Packet Tracer is one of the most popular network simulation software, especially for those learning networking or pursuing Cisco certification.
06 / broadcast
Learning out loud
Knowledge is priceless — but it can be free if you're willing to look for it. I share what I break, fix, and figure out through videos and articles.
Watch on YouTube./play --random
07 / faq
Frequently asked questions
The stuff people actually want to know before hiring me.
Security audits, custom development, and consulting. I also write about everything I learn over on the blog. If it's technical and it's hard, chances are I'm interested.
Direct transfer or a trusted escrow service — whatever makes you comfortable. Scope and milestones get agreed up front, no surprises.
100% guarantee? Nah, more like 99.9%. But if you trust me, then yeah — it's solid. I work with clear contracts, defined scope, and full transparency.
Every single day. Everything on this site — the tools, the blog, the infrastructure — runs my own workflows first. I build what I need, then share it.
08 / contact
Got something to build — or break?
Whether it's a security audit, a project that needs shipping, or just a technical question — my inbox is open.