DENPASAR, BALI / AN OPEN DOOR
Dimas
Maulana.
Security researcher. Open-source builder.
Founder of TCP1P.
Research. Build. Share.A personal space, from Bali.
PICK A CORNER, OR KEEP SCROLLING
A little room.
A bigger world.
02 / THE WORKBENCH
Tools, experiments,
and shared work.
Tools to remove friction, labs to learn from, and things built with a community.
3 closer looks · 9 projects in the collection
Security monitoring · personal projectVWA-Wazuh (Mini Lab SOC)A practice lab that connects web applications with security monitoring.
- The problem
- Learning an application and learning its monitoring stack often happen separately.
- My work
- A containerized lab integrating four practice web apps with Wazuh and Discord alerts.
- The result
- A reusable local environment for exploring applications alongside a monitoring dashboard.
Mar 2023 - Present
- Security
- Wazuh
- IDS
- Database Security
CLI tooling · personal projectCTFIFYFind, download, and organize challenges from the terminal.
- The problem
- Competition files and challenge discovery can interrupt the work itself.
- My work
- A Go command-line tool with challenge search by name, category, or tag, plus local downloads.
- The result
- An open-source workflow for finding and managing CTF challenges in one place.
Jan 2023 - Present
- CTF
- Go
- CLI
Competition UI · TCP1P team projectTCP1P ThemeA recognizable front door for a community-run competition.
- The problem
- A CTF platform needs an identity that feels like the community running it.
- The contribution
- CTFd theme work within TCP1P, extending the existing core-beta theme.
- The result
- An open-source TCP1P-branded interface. This is team work built on CTFd, not a platform built from scratch.
Nov 2023 - Present · TCP1P
- HTML
- Python
- Jinja
- Bootstrap
03 / THE NOTEBOOK
Leave the
notebook open.
Competition writeups and the references I keep within reach.
16 posts · 61 notes. Search or open the archive.
RECENT POSTS / 16 IN THE LIBRARY
RECENT FIELD NOTES / 61 IN THE LIBRARY
04 / THE PHOTO WALL
The people
behind the flags.
From Bali to Vietnam and China. A few moments with the people behind the work.
1 / 7 · SAS CTF 2024
7 MOMENTS / 5 TEAMS
The teams behind the memories
05 / THE TROPHY SHELF
Every award.
A story behind it.
Individual competition, team finals, and research recognition. Different parts of the same journey.
8first-place results21recorded results
Team scoreboards verify team results; entries without a source are labelled as portfolio records.
- 1st Place
XCTF 2025 Professional Division
Individual · November 2025
- 2nd Place
- 1st Place
Patchstack February 2025 Bug Bounty Program
Individual · February 2025
06 / THE BOOKSHELF
Always adding
to the toolkit.
Learned by building, researching, and sharing.
Offensive Security
Penetration Testing · Web Exploitation · Vulnerability Research
Programming
Python · Go · JavaScript
Security Automation
AI-assisted Vulnerability Triage · CVE-hunting Tooling · Custom Exploit Scripts
Cloud & Infrastructure
AWS · Docker · Kubernetes
Certifications
Certified AppSec Pentester (CAPen) · with Merit · CompTIA Linux+ ce
07 / THE STORY WALL
The person
behind the desk.
Based in Denpasar, Bali. Turning research into tools, training, and community.
6 roles · Research, engineering, training & community
CVE-2025-26909
WP Ghost · CVSS 9.6 · Published March 2025
Read the credited advisory ↗Researcher profile & reports ↗08 / THE REVIEW FOLDER
Source code review.
Clear, useful fixes.
I run AI-assisted reviews over real codebases, triage the bugs that are actually exploitable, and hand back ready-to-merge fixes with a plain-English report.
Starting at$99per project · about Rp 1.780.000
- AI reviews your code, I triage what's real
- Potential vulnerabilities, exploitable ones flagged
- Dynamic checks that the program still works
- Suggested, ready-to-merge fixes in a plain report
Usually 1–2 days when available · One free re-test
Let’s scope a review ↗ Service details & demo ↗09 / BACK HOME
There’s room for
one more story.
Research, a project, or a simple hello. Tell me what you have in mind.
[email protected] ↗ Services & pricing ↑Thanks for stopping by.