001Web Platform
JOTA JOTI INDONESIA
The national scouting information platform — recognized by ayopramuka kwarnas.
STACK 4 ITEMSSTATUS LIVEYEAR 2026
PORTFOLIO
HELLO, I'M
MUHAMMADRAFIFRIANTO,C.PS
01RED TEAM OPERATOR02PENTESTER03FULL STACK DEVELOPER
SCROLL
01 — INTRODUCTIONA WORKING PHILOSOPHY
BUILD.BREAK.UNDERSTAND.REBUILD.
CYBERSECURITY IS NOT JUST ABOUT DEFENSE — IT IS ABOUT UNDERSTANDING ATTACK. YOU CANNOT BUILD A FORTRESS IF YOU DO NOT KNOW HOW SIEGES WORK. THAT IS THE WHOLE FRAME: BUILD, BREAK, UNDERSTAND, REBUILD.
WHO —
A 16-year-old pentester, red team operator, and full stack developer from Indonesia — breaking things legally since before being old enough for coffee, and shipping platforms that survive national audiences. Daily driver Arch Linux with Hyprland, because suffering with style is still style. First vulnerability found at 13, in the school Wi-Fi; they still don't know.
02
OPEN FOR PROJECTSSPOTLIGHT
Custom websites built by someone who breaks websites for a living — so yours gets built like it matters. Clean, fast, and priced for real people: starting from Rp 50K, with the final price following the complexity of the build. Every project is discussed first on Instagram — scope, style, and timeline, no mystery invoices.
YES — CHEAPER THAN YOUR STREAMING SUBSCRIPTION. NO, THE QUALITY IS NOT.
START FROMRP 50K
PRICINGSCALES WITH COMPLEXITY
RESPONSEUNDER 24 HOURS
DISCUSS ON INSTAGRAM 1:1 VIA DM — NO FORMS, NO MIDDLEMEN
03
SELECTED WORK
002Automation Tool
ARKANPROJECTS
One-click Pterodactyl installer — game-server setup shouldn't require three doctorates.
STACK 4 ITEMSSTATUS LIVEYEAR —
003Security Tooling
RED TEAM TOOLKIT
Custom scripts and tooling for penetration testing — built from scratch, because the existing tools weren't torturous enough.
STACK 4 ITEMSSTATUS IN DEVELOPMENTYEAR 2026
004Desktop Environment
HYPRLAND RICE
Custom Hyprland dotfiles on caelestia-dots — a desktop for people with better things to do at 3 AM.
STACK 4 ITEMSSTATUS IN DEVELOPMENTYEAR 2026
END OF SELECTION
ALL PROJECTS→
04
EXPERIENCE
05
CAPABILITIES
The red side of the house: web application and network penetration testing, from reconnaissance through exploitation. SQLi to RCE, recon to privilege escalation — practiced methodically, reported honestly.
SQLiXSSRCESSRFCSRFLFI/RFINetwork PentestWeb App PentestPrivilege EscalationReverse ShellExploit DevRecon & OSINT
Building what breaking teaches: full-stack applications from interface to database. The offensive mindset shapes defensive code — systems written by someone who knows exactly how they'll be attacked.
JavaScriptPythonBashFull StackNode.jsDatabase
The daily loadout. Every tool here is one I actually run — from Nmap and Burp Suite on engagements, to Docker and Git on builds, to Kali and Arch as home ground.
NmapBurp SuiteMetasploitGobusterSQLMapWiresharkHydraNetcatGitVS CodeHelixDockerKaliArch
06
SECURITY RESEARCH
A LIVE ARCHIVE OF
PUBLICLY ATTRIBUTED
SECURITY RESEARCH.
TOTAL ATTRIBUTED — LIVE FROM PROVIDER
FETCHING FEED…
DATA SOURCE — NVD / CVE DATABASE
07
RESEARCH
FIG. 01 — THE WORKBENCH08 — ABOUT
THE PERSON
BEHIND THE
TERMINAL.
Sixteen, based in Indonesia, and fluent in two languages: code and exploit. Main developer of a national scouting platform by day, red-team operator by night — powered by Arch Linux, caffeine, and a rice cleaner than his room.
READ THE FULL STORY RED TEAM OPERATOR — PENTESTER
09 — CONTACT
SERIOUS INQUIRIES AND MEMES BOTH ACCEPTED.