Joseph Elnathan Wibowo
Learning how systems break so I can help build ones that don’t.
The areas I’m building depth in through coursework, labs, and practice.
Finding and testing flaws in web apps.
Mapping hosts and reading the traffic between them.
Writing code that handles input and credentials safely.
Validating weaknesses in lab targets.
Recovering and analysing evidence from disks and captures.
$ ls --level
Turning ideas into posts, captions, and visuals people actually read.
Grew from member to activist to board member, and took on more each step.
Working in committees and dev teams where every part has to fit.
Six events on committee, from freshman expos to Christmas and anniversaries.
Working through unfamiliar challenges against the clock.
Picking up new tools and languages as each project needs them.
The toolkit I reach for when scanning, testing, and analysing.
Primary environment for security testing.
Host discovery and port scanning.
Packet capture and traffic analysis.
Intercepting and testing web requests.
Validating vulnerabilities in lab targets.
Detecting SQL injection flaws.
Testing password and hash strength.
Dynamic instrumentation and runtime hooking.
Decompiling Android apps to Java source.
Decoding and rebuilding APK resources.
Disassembling and decompiling binaries.
Disk image and digital forensic analysis.
Competitions, certifications, and awards along the way.
Made it through to the final round of the TECHFEST 2026 Capture The Flag competition by solving security challenges against the clock.
Where I’ve contributed, led, and learned outside the classroom.
Media for PO BINUS’s booth at the Kemanggisan expo, “Loved to Love”, introducing the fellowship to the incoming B29 freshmen.
Media for PO’s welcome program for new students, helping freshmen find a community as they start university.
Media for the night welcoming new members: praise & worship, ice breaking, an entertainment show, and group games.
Media for the basic leadership training that prepares PO’s new B29 activists for organisational work.
Media for PO BINUS’s Christmas worship celebration, held each year to commemorate the birth of Jesus.
Served on the committee for the Cyber Security Community’s anniversary celebration, bringing members together to mark another year of the community.
From coursework to team projects, the things I’ve had my hands on.
Diet.AI creates meal plans around a user’s health conditions, so it holds sensitive data. I developed its Express microservices with security first: auth, admin, email, and support, each with its own database.
A fintech web app for people who are struggling with money and want to reach a financial target. It reads their financial health and maps the path to financial freedom, with AI coaching and certified experts when they need more help.
Loading map…
| Rank | Country | Users attacked |
|---|---|---|
| 1 | Bangladesh | 11.71% |
| 2 | India | 7.40% |
| 3 | Tajikistan | 7.13% |
| 4 | Venezuela | 7.05% |
| 5 | New Zealand | 6.58% |
| 6 | Vietnam | 6.34% |
| 7 | Taiwan | 6.28% |
| 8 | Belgium | 6.24% |
| 9 | France | 5.97% |
| 10 | Hungary | 5.92% |
| 11 | Nepal | 5.91% |
| 12 | Portugal | 5.86% |
| 13 | Italy | 5.77% |
| 14 | Costa Rica | 5.72% |
| 15 | Canada | 5.65% |
| 16 | Qatar | 5.61% |
| 17 | Dominican Republic | 5.52% |
| 18 | Palestine | 5.48% |
| 19 | Greece | 5.47% |
| 20 | United Arab Emirates | 5.43% |
Source: Kaspersky Securelist, Desktop and IoT threat statistics for Q2 2026. Figures cover users of Kaspersky products. Only the top 20 are published, so other countries are unranked, not attack free.
