Click the terminal to run the next command

arwah@portfolio: ~
arwah — builder · breaker · tinkerer
$ls ~/interests
development/ cybersecurity/ reverse-engineering/
$cat mission.txt
understand how things work — then build better ones.
$./status --now
learning in public. shipping when it works.
current build: this portfolio.
$
developmentcybersecuritysystemswebandroideverything else

Projects

FlowGuard

Explainable network traffic anomaly detection with 11 detectors, PCAP/PCAPNG investigation, learned baselines, and a local dashboard. Includes a reproducible offline lab with synthetic traffic.

  • Python
  • Scapy
  • Streamlit
  • SQLite
View on GitHub
FlowGuard preview

Linux Process City

A live 3D Linux process monitor that turns running processes into a city skyline. Explore CPU, memory, and thread usage with searchable process details, WebSocket updates, and a synthetic demo mode.

  • TypeScript
  • Three.js
  • FastAPI
  • psutil
View on GitHub
Linux Process City preview

ASCII Video Player

A terminal video player that turns local videos into animated ASCII art with monochrome, ANSI, and truecolor modes. Includes a flickering candle demo, trimming and looping, and MP4 export with optional source audio.

  • Python
  • OpenCV
  • NumPy
  • Pillow
View on GitHub
ASCII Video Player preview

Writeups

CTF solutions, investigation notes, and lessons from each solve.

Mobile / API · 5 min read

DEADFACE CTF — Hard Kept Secrets: De Monne Financial IDOR

The app exposes an insecure direct object reference (IDOR): an authenticated audit user who owns no accounts can still request records for another account by changing the numeric account…

Read writeup ↗
Reverse Engineering · 6 min read

DEADFACE CTF — Reptilians / Lizard People

The password and decoded flag both match the MD5 values embedded in the executable. This solution uses static analysis and a reconstruction of the decoder. The Windows executable was not…

Read writeup ↗
Forensics · 3 min read

Uninvited Guest — Writeup

The companion pcap to Who Goes There? captures the initial access: LLMNR poisoning of the file-server name, the NTLMv2 credential leak it triggers, the attacker relaying into the real…

Read writeup ↗
OSINT · 2 min read

GeoINT CTF — Reflection

Geolocate a photograph showing swans and gulls beside a broad river, then identify the precise point accepted by the challenge verifier.

Read writeup ↗
Binary Exploitation · 3 min read

picoCTF — Heap Overflow (ctfaa)

strcpy into i1->name (a malloc(8)) has no bounds check. Heap chunks are allocated sequentially, so a long argv[1] walks straight out of the name chunk and into the i2 struct that sits…

Read writeup ↗
Scripting · 3 min read

World Cup 2026 Final — Penalty Shootout

The service presents a World Cup final that finished 0–0. The winner is decided by a penalty shootout. For every Uzbekistan penalty, the player must choose one of three directions:

Read writeup ↗
Browse all 26 writeups ↗

Experience

2025 — NOW

BSc Cybersecurity Management · Cyber University of Uzbekistan

Majoring in cybersecurity management. Focused on reverse engineering and cryptography, with a strong interest in purple-team thinking — pairing offensive techniques with defensive engineering.

  • Reverse Engineering
  • Cryptography
  • Purple Team
OCT 10–11, 2026

WIUT Inter-University Hackathon — Finalist, 7th Place · WIUT

Reached the finals of the WIUT Inter-University Hackathon and finished in 7th place on October 10–11, 2026.

  • Hackathon
  • Inter-University
  • Finalist
  • Top 10
APR 30, 2026

CUTS CTF — Finalist · National Finals · Uzbekistan

Qualified among the top 10 teams on April 18, 2026, for the offline grand final in Uzbekistan on April 30, 2026. Disqualified for doing a great job.

  • CTF
  • National
  • Finalist
2026

THCon 2K26 CTF — 9th Place · CSU CTF TEAM

Highest placement of the season on CTFtime — 9th place among all participating teams, earning 5080 CTF points.

  • International
  • Top 10
  • Jeopardy
2026

Break The Syntax CTF — 45th Place · CSU CTF TEAM

1981 CTF points toward the team's 2026 rating on CTFtime.

  • International
  • Jeopardy
2026

D^3CTF 2026 — 46th Place · CSU CTF TEAM

4480 CTF points in one of the season's toughest international fields.

  • International
  • Jeopardy