NexSec 2025
December 2025
Earned 3rd in NexSec 2025 hosted by MCMC with NetByteSec, successfully solving challenges in Digital Forensics.
Hi, my name is Danish and I am a
Network & Security CS student with expertise in web development and CTF competitions
Hi, I'm Mohammad Danish Hakim bin Mohd Nasir, a Computer Science student specializing in Network and Security at International Islamic University Malaysia (IIUM) in Gombak, Selangor.
I've been programming since I was 10 years old, with strongest expertise in JavaScript. Recently, I've been focusing on cybersecurity, with a particular interest in Web Exploitation and binary exploitation.
Beyond programming, I have digital editing skills in Adobe Photoshop and Illustrator, experience in live streaming with equipment like ATEM Mini Pro and OBS Studio, and a background in robotics from representing my school in competitions for 3 years.
Competitions, writeups, talks, and challenges from my CTF journey
December 2025
Earned 3rd in NexSec 2025 hosted by MCMC with NetByteSec, successfully solving challenges in Digital Forensics.
December 2025
Earned 8th in iGOH 2025 hosted by UniKL MIIT, successfully solving challenges in Web Exploitation.
November 2025
Earned 5th in IBOH CTF 2025 - Stage 1 hosted by APU FSeC-SS, successfully solving challenges in Web Exploitation.
December 20, 2025
By Team PERISAI Beta - Jerit3787, Mynz & mont3r Description: Corp Bhd. has suffered a catastrophic breach. Executive leadership reports that a…
December 16, 2025
By Team PERISAI Beta - Jerit3787, Mynz & mont3r Residual Implant By Jerit3787 Category: Reverse Engineering Description: Following a compromise…
December 1, 2025
Team Assignment MCC 2025 - Wannasmile - genni_1227, kreee00, viinieeshraman, Jerit3787, Djumanto as mentor & 3ch0f0xy as agent Flag 1 - Firebase…
December 2025
Delivered a technical talk at the “Introduction to PWN” workshop hosted by ICE and SIG at IIUM. The session focused on Binary Exploitation fundamentals, where I guided participants through real-world CTF scenarios, demonstrated on solving challenges, and shared practical techniques for solving pwn-based challenges.
May 2025
Delivered a technical talk at the “Introduction to CTF” workshop hosted by UPM GDoC at Universiti Putra Malaysia (UPM). The session focused on Web Exploitation fundamentals, where I guided participants through real-world CTF scenarios, demonstrated common vulnerabilities, and shared practical techniques for solving web-based challenges.
July 2026
Authored a Node.js / EJS Web challenge for UTAR CyberHunt 2026: user preferences are recursively merged, then spread into the template engine's render options — turning a settings endpoint into server-side RCE.
July 2026
Authored a GraphQL Web challenge for UTAR CyberHunt 2026: a sensitive field on the shared User type stays reachable from public queries, so a field-level authorization gap leaks the flag a few hops in.
June 2026
Authored a single-step Web challenge for HACKNYX CTF 2026 built around CVE-2025-29927, the Next.js middleware authorization bypass.
A set of my technical skills and competencies
My professional journey and notable activities
2023
Provided technical expertise for several major events, focusing on live streaming, video production, and technical coordination.
2023
Served as a committee member for various programme, contributing to event organization and management.
Previous Experience
Represented my school for 3 years in Robotic Competition MRSM-SeMalaysia, building both technical skills and teamwork abilities.
A collection of my recent work and projects
Latest Version
Student statistics management system with analytical features.
Intermediate Version
Improved version with enhanced UI and features.
Initial Version
Initial version of the student statistics system.
Web Application
Task management and planning tool for students.
Java Application
Java-based application with Material Design interface.
Let's connect and discuss how we can work together
Feel free to reach out for collaborations, project inquiries, or just to say hello!
sendSend Me an Email