Skip to content
View mythic3011's full-sized avatar
🎯
Focusing
🎯
Focusing
30 followers · 107 following

Achievements

Achievement: Pull Sharkx3Achievement: StarstruckAchievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: YOLO

Achievements

Achievement: Pull Sharkx3Achievement: StarstruckAchievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: YOLO

Highlights

  • Pro

Block or report mythic3011

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mythic3011/README.md

mythic3011

terminal intro

Full-stack engineer and Information Security student in Hong Kong.
I build things that work in production, not just in demos.

Projects

Security & Cryptography

  • Secure-Instant-Messenger — E2E encrypted messaging app. X25519/AES-256-GCM, Ed25519 identity keys, Argon2id + TOTP 2FA, replay protection, Textual TUI client. Security tests cover replay attacks and ciphertext tampering.

Full-Stack & Backend

  • job-Boards — Laravel job board with a production security stack: CrowdSec IDS, Prometheus, Grafana, Loki, HMAC auth service, Docker split-plane deployment.

Data & Automation

  • trustpilot-scraper — Modular TypeScript + Playwright extraction pipeline. 12 single-responsibility modules, property-based tests with fast-check.

Infrastructure & Open Source

  • rules — Maintained fork of Custom_OpenClash_Rules, optimised for Hong Kong: AI service routing, DNS leak prevention, IPv6 support, shell/Python build scripts.

Homelab

Router      OpenWrt (own signed build) · AdGuard Home · CrowdSec · qosify
Edge        Xray REALITY · static blog honeypot · DoH
Core        VictoriaMetrics · VictoriaLogs · Grafana · CrowdSec hub
Access      Cloudflare Zero Trust · passkeys (Pocket ID)
Runtime     Podman (rootless) · Docker · GitHub Actions

Everything containerised. Everything monitored.

CTF

Year Event Result
2025 PolyU × NuttyShell Cybersecurity CTF 🥇 1st place
2024 PolyU × NuttyShell Cybersecurity CTF 🥉 2nd runner-up
2023–24 HKCERT Cyber Security New Generation CTF Participant

There's a flag hidden somewhere in my repos.
ZmxhZ3tub3RfdGhpc19vbmV9 is not it.

Defaults

deterministic > magic
fail loudly, never silently
container-first, always
read before edit
authority before patch
no vendor lock-in
PDPO/GDPR by default

Currently

  • Building: own OpenWrt firmware with signed releases and QEMU-tested CI
  • Building: AI agent workflow runtime for multi-repo development
  • Research: LLM-assisted IoT / network protocol fuzzing (capstone)
  • Learning: HTB SOC Analyst path, then CDSA

Stack

Languages   TypeScript · Python · PHP · Bash/Zsh · SQL
Backend     Laravel · FastAPI · Node.js · React
Data        Playwright · Selenium · spaCy · NER
Infra       Docker · Nginx · OpenWrt · Tailscale · Cloudflare
Monitoring  Prometheus · Grafana · Loki · CrowdSec
Crypto      X25519 · AES-GCM · Ed25519 · Argon2id · TOTP

Background

  • 🏆 CTF Champion — PolyU × NuttyShell Cybersecurity CTF 2025
  • 🎓 Information Security degree, Hong Kong (in progress)
  • 💼 Previously: OSINT pipeline and NER engineering, mapping industry

Activity

contribution snake

Also: VRChat, avatar design, homelab tinkerer.

Contact via LinkedIn or commit history.

Pinned Loading

  1. job-Boards job-Boards Public

    A Laravel job board hardened as a blue-team security deployment project, with Docker split-plane deployment, Nginx perimeter controls, CrowdSec, observability, OWASP ZAP evidence, and reproducible …

    PHP

  2. FreshChain FreshChain Public

    A Java web application for fruit inventory, delivery, reservation, and reporting workflows, hardened as a production-grade deployment project with role-based access control, Docker deployment, obse…

    Java

  3. wailim0506/Warehouse-Management-and-Online-Ordering-Platform wailim0506/Warehouse-Management-and-Online-Ordering-Platform Public

    This is assignment of ITP4915M

    C#

  4. rules rules Public

    Generated OpenClash/Mihomo profiles, routing rules, DNS integrations, and a fail-closed OpenClash Guard for region-aware AI and service traffic.

    Python 1

  5. Secure-Instant-Messenger Secure-Instant-Messenger Public

    End-to-end encrypted instant messaging application. Demonstrates strong cryptographic practices, replay protection, and an honest-but-curious server model.

    Python

  6. fantastic-world-java fantastic-world-java Public

    Java console application demonstrating Command, Factory, and Memento patterns with undo/redo, UML diagrams, and reproducible demos.

    Java