PERSONAL
WORKSPACE

WELCOME TO MY LITTLE CORNER OF THE INTERNET

Kang Ali.

Security researcher.
Tool builder. Always learning.

Exploring how systems work.
Finding where they break.
Sharing what I learn along the way.

“Sinau ben ora Ketinggalan”

Explore my work A little about me
ROOM_01 / THE WORKSPACEPERSONAL ARCHIVE
A vintage monitor and keyboard on a dark desk, with Room Kang Ali on the green terminal screen.
A place to think, test & build.
THREAT HUNTING  /  BUG HUNTING  /  APPSECSCROLL TO EXPLORE
01BEHIND THE HANDLE

Curiosity,
put to work.

I’m Kang Ali, a security researcher working across threat hunting, vulnerability discovery, and application security.

My journey spans malware analysis, penetration testing, and security R&D. I build tools, explore the role of AI in security research, and share what I learn through training and the community.

CURRENT ROLEManager Cyber Security R&D
Punggawa Cybersecurity

15+Years of experience
100+Projects
50+Trainings
10+CVE discoveries
02FROM THE WORKBENCH

Tools I’ve built.

Ideas turned into tools for security research.

View GitHub
SELECTED TOOL / 01

DursGo

DursGo is a web application security scanner designed for penetration testing and automated audits.

Explore project
TOOL / 02

Droid LLM Hunter

Tool to scan for vulnerabilities in Android applications using Large Language Models (LLMs).

Explore project
TOOL / 03

DursBurp

Burp Suite extension that integrates the power of large language models (LLMs).

Explore project

DursVulnNSE

Custom Nmap NSE scripts for vulnerability detection and network security assessment.

View project

PHP M-Shell 27.9

A lightweight PHP utility for system administration and security testing purposes.

View project

AMOS

Android Malware Operating System - A specialized environment for analyzing Android malware safely.

View project

WMTA

Windows Malware Tools Analysis - A suite of tools for analyzing Windows-based malware.

View project
03RESEARCH & DISCOVERIES

Following the flaws.

Vulnerability discoveries, advisories, and research archives.

11 / LISTED CVEs
IDENTIFIERVENDOR / PRODUCTREFERENCE
CVE-2025-11718Mozilla FirefoxAdvisory CVE-2025-11713Mozilla FirefoxAdvisory CVE-2025-10530Mozilla FirefoxAdvisory CVE-2025-6434Mozilla FirefoxAdvisory CVE-2024-11698Mozilla FirefoxAdvisory
Earlier discoveries (6)
CVE-2024-10465Mozilla FirefoxAdvisory CVE-2023-25182IntelAdvisory CVE-2023-4901Google ChromeAdvisory CVE-2022-46828JetbrainsAdvisory CVE-2022-27180IntelAdvisory CVE-2010-5286JoomlaAdvisory

BUG BOUNTY / HALL OF FAME

GoogleAppleMicrosoftFacebookMozillaSafariHuaweiCryptoZoho Corp
RESEARCH ARCHIVESPacketStormExploit-DBCxsecurity
04THE LONG WAY HERE

Always a
student.

From malware analysis to security R&D. Different roles, the same curiosity.

  1. 2023 - Present

    Manager Cyber Security R&D

    Punggawa Cybersecurity

  2. 2023

    Senior Consultant – Threat Hunting

    ITSEC Asia

  3. 2018 - 2023

    Senior Penetration Tester

    Juke Solusi Teknologi

  4. 2018

    DevSecOps Engineer

    Tjakrabirawa Teknologi Indonesia

  5. 2016 - 2017

    Cyber Security Engineer

    Xirka Dama Persada

  6. 2012 - 2015

    R&D - Malware Analyst

    ID-SIRTII/CC

05OUTSIDE THE TERMINAL

Knowledge is for sharing.

On stage, in the classroom, and with the community.

ARSENAL / SPEAKER

Black Hat
Asia 2026

Presenting DursGo.
A Go-based web vulnerability scanner.

BUILD. TEST. SHARE.

Idsecconf '25, '24, '22, '15

Indonesia's premier cybersecurity conference.

SPEAKER

CNN Interview

Expert commentary on cybersecurity trends.

MEDIA EXPERT

Telkomsel Network Directorate

Journey Hacking security awareness program.

SPEAKER

Telkom University

Guest lecturer for advanced security courses.

GUEST LECTURER

Code Bali, Honeynet, BPJS

Technical workshops speaker and Hackathon Judge.

SPEAKER & JUDGE
Teaching & training8 AREAS

Malware Analysis

Bareskrim Polri

Fundamental Pen-Testing

BSSN

Basic Hacking and CTF

BIN

Security Hacking Defence

Ministry of Defence

Security Web Hacking

Ditjen AHU

OWASP AppSec

Kemenkeu

AppSec Verification

Bank BNI

Certified Ethical Hacker (C|EH)

EC-Council

Credentials6 CREDENTIALS

Certified EC-Council Instructor

EC-Council

Certified Ethical Hacker

EC-Council

Certified Secure Computer User v2

EC-Council

CCNA Routing and Switching

Cisco

Certified Practical Malware Analysis

TCM Security

Certified Practical Ethical Hacking

TCM Security

ROOTED IN COMMUNITY

Exploit-ID

Founder of a community for Indonesian security researchers to share knowledge and collaborate on vulnerability research.

CTF problem setter — Cyber Jawara, CDC, Gemastik, KKSI, and more.

STAFF / MEMBER / CREW

Indonesian Hacker · Hacker Newbie · Devilzc0de · Indonesian Coder · Explore Crew

BUG HUNTING

HackerOne · YesWeHack · Bugcrowd · Browser

NOTES FROM THE ROOM

Research, written down.

Write-ups and cybersecurity thoughts on Medium.

THE CONVERSATION CONTINUES

Let’s exchange
some ideas.

Find me around the internet.