_____ __ _______ ___                   _                     _____  _____   ___  ______ ____  _____ _____  ___  _____  __ 
  / ____/_ |__   __/ _ \                 | |                   |  __ \|  __ \ / _ \|  ____|___ \| ____| ____|/ _ \|  __ \/_ |
 | |  __ | |  | | | | | |      __ _      | | __       __ _     | |__) | |__) | | | | |__    __) | |__ | |__ | | | | |__) || |
 | | |_ || |  | | | | | |     / _` |     | |/ /      / _` |    |  ___/|  _  /| | | |  __|  |__ <|___ \|___ \| | | |  _  / | |
 | |__| || |  | | | |_| |    | (_| |  _  |   <   _  | (_| |    | |    | | \ \| |_| | |     ___) |___) |___) | |_| | | \ \ | |
  \_____||_|  |_|  \___/      \__,_| (_) |_|\_\ (_)  \__,_|    |_|    |_|  \_\\___/|_|    |____/|____/|____/ \___/|_|  \_\|_|

Cybersecurity-focused software engineer with practical experience in system security, web application security, and low-level programming.

Currently completing the 42 Common Core, with emphasis on C programming, memory management, operating system fundamentals, and secure software design.

Active contributor to open-source ecosystems (Fedora Project) and continuous learner through CTFs, vulnerability research, and hands-on security experimentation.

"Security is not a product, but a process." – Building secure systems through deep understanding and responsible disclosure.

Network & Web Penetration Testing - Identifying critical vulnerabilities in web applications and network infrastructure

• OWASP Top 10 exploitation and remediation
• Advanced SQL Injection & XSS techniques with bypass methods
• Authentication Bypass - Session management, JWT, and OAuth vulnerabilities
• Security Misconfigurations - Server hardening and secure deployment

• Linux Hardening - SELinux, AppArmor, iptables, and fail2ban configurations
• Secure Code Review - Static analysis and manual code auditing
• Security Monitoring - Log analysis, SIEM integration, and intrusion detection
• Incident Response - Threat detection, forensics, and remediation
• Threat Modeling - STRIDE, attack trees, and risk assessment

Active Categories: Web · Crypto · Forensics · OSINT · Reverse Engineering · PWN · Steganography

Active participant in CTF competitions on platforms like HTB, THM, and PicoCTF. Contributing through detailed security writeups and responsible vulnerability disclosures, with continuous skill development through practical challenges.

• Vulnerability Assessment - Systematic evaluation of application security postures
• Exploit Development - Creating proof-of-concept exploits to demonstrate security weaknesses
• Security Automation - Custom Python and Bash scripts for security testing
• Open Source Contributions - Security improvements to public repositories

┌─ Web Application Testing
│  ├─ Burp Suite Professional      │ Advanced web vulnerability scanner
│  ├─ OWASP ZAP                    │ Web application security testing
│  ├─ SQLMap                       │ Automated SQL injection exploitation
│  └─ Nikto                        │ Web server scanner
│
┌─ Network Reconnaissance
│  ├─ Nmap                         │ Network discovery and security auditing
│  ├─ Masscan                      │ Fast port scanner
│  ├─ Wireshark                    │ Network protocol analyzer
│  └─ tcpdump                      │ Packet capture and analysis
│
┌─ Exploitation Frameworks
│  ├─ Metasploit Framework         │ Penetration testing framework
│  ├─ Exploit-DB                   │ Vulnerability database
│  └─ SearchSploit                 │ Exploit search tool
│
└─ Password & Hash Cracking
   ├─ Hashcat                      │ Advanced password recovery
   ├─ John the Ripper              │ Password cracking
   └─ Hydra                        │ Network login cracker

• C Language
  ├─ Memory management
  ├─ Systems programming
  ├─ Low-level security
  └─ Buffer overflow analysis

• Python 3
  ├─ Exploit development
  ├─ Security tooling
  ├─ Web scraping
  └─ Data analysis

• Bash Scripting
  ├─ Linux automation
  ├─ Security hardening
  ├─ Log parsing
  └─ Process monitoring

| Current Certifications | https://www.credly.com/users/orgito-leka |

On my professional development roadmap, I'm pursuing industry-recognized certifications including the OSCP (Offensive Security Certified Professional) for advanced penetration testing mastery, CEH (Certified Ethical Hacker) to formalize my ethical hacking expertise, CompTIA Security+ as a foundational security certification, and eJPT (eLearnSecurity Junior Penetration Tester) to validate my practical penetration testing skills.

My learning journey is centered around the 42 Network core curriculum with deep focus on C programming and Unix systems. I engage in daily security research involving vulnerability analysis and exploit study. My dedicated home lab environment serves as a testing ground for security research and experimentation, while I actively contribute to the security community through detailed write-ups and technical documentation that helps others learn from my discoveries.

 Active CTF Competitor              OWASP Top 10 Practitioner
 Security Researcher                Open Source Contributor
 Secure Software Developer          42 Network Student
 Linux Security Enthusiast          DevSecOps Advocate

def security_mindset():
    """
    Security is not about making something completely unbreakable,
    but about making the cost of breaking it exceed the value gained.
    """
    principles = {
        'defense_in_depth': True,
        'least_privilege': True,
        'fail_securely': True,
        'security_by_design': True,
        'continuous_learning': True
    }
    
    while True:
        learn()
        practice()
        share_knowledge()
        improve_security()