Hey! I’m Ferdy Oktavianus aka ParanoidBandit 👋

I’m a cybersecurity enthusiast who enjoys breaking things, figuring out how they work, and occasionally making them break in interesting ways.

My main interests are Capture The Flag (CTF), Penetration Testing, Web Security, Active Directory, Reverse Engineering, Digital Forensics, and offensive security.

When I’m not working, you’ll probably find me:

• 🕵️ Hunting vulnerabilities and solving CTF challenges in HackTheBox etc
• 💻 Playing around with Linux, networks, and security tooling
• 🔐 Learning offensive security and penetration testing
• 🏴‍☠️ Participating in CTF competitions with my team

💼 Professional Experience

I’m currently working professionally in the cybersecurity field, where I get to apply security concepts and problem-solving skills to real-world environments.

My professional interests include:

• Penetration Testing
• Offensive Security
• Network Security
• Web Application Security
• Windows & Active Directory Security
• Digital Forensics & Incident Response
• Vulnerability Assessment

🏆 Certifications

• OSCP — Offensive Security Certified Professional (Offsec)
• CPENT - Certified Penetration Testing Professional (EC - Council)
• LPT - Licensed Penetration Tester Master (EC - Council)
• CHFI — Computer Hacking Forensic Investigator (EC - Council)
• CNSP - Certified Network Security Practitioner (TheSecOps Group)
• CAP - Certified AppSec Practitioner (TheSecOps Group)
• eJPT - eLearn Junior Penetration Tester (INE Security)
• CRTA - Certified Red Team Analyst (CyberWarfare Labs)
• C3SA - Certified Cybersecurity Analyst (CyberWarfare Labs)
• ACP - APISecurity Certified Practitioner (APISec)

Cybersecurity

I’m particularly interested in understanding attack paths rather than just individual vulnerabilities. I enjoy going from initial enumeration to exploitation, privilege escalation, lateral movement, and eventually figuring out how everything connects together.

Some areas I spend time learning:

• Web Application Security
• Active Directory & Windows Security
• Network Penetration Testing
• Privilege Escalation
• Kerberos & Authentication Attacks
• Reverse Engineering
• Digital Forensics & DFIR
• OSINT
• OPSEC

CTF

CTFs are one of my favorite ways to learn cybersecurity.

I enjoy challenges that require a combination of enumeration, exploitation, scripting, debugging, and thinking outside the box. Whether it’s a weird web application, an encrypted file, a suspicious binary, or an unnecessarily complicated Active Directory environment — I’m probably going to poke it until something interesting happens.

Break it. Understand it. Document it.

Tools & Technologies

Linux              Windows
Python              Bash
PowerShell          Hashcat
Burp Suite          Nmap
NetExec             Impacket
BloodHound          Wireshark
Ghidra              IDA
Metasploit          ffuf
SQLMap              Gobuster

Currently Learning

I’m constantly trying to improve my understanding of:

Offensive Security, Red Teaming, Active Directory, Advanced Exploitation

Currently preparing for more advanced penetration testing and offensive security challenges.

Find Me

You can find my projects, experiments, writeups, and other security-related stuff here on.

If something here helps you, breaks something for you, or makes you curious — feel free to reach out.

---

Stay curious. Keep hacking. 🐀