Exploring cyberspace.
Try. Push. Sleep.
iMoon07
Security / Indonesia
Hi, I’m Kurnia.
I like explore about tech.
Raja Muhammad Kurnia Setyawan, known as @iMoon07. A programmer and now a freelance penetration tester based in Bintan Islands, Indonesia.
- What I Do
- Web, Mobile & API Security, and Technical Writing.
- Active Project
- Vulnerability assessment & penetration testing
Security.
In practice.
PT. Merdeka Siber Teknologi
Joined Merdeka Siber Batch 11 in 2024 and completed a 3-month training program focused on learning and practicing penetration testing. After completing the training, continued working on freelance, project-based VAPT engagements starting in January 2025, assessing web applications, APIs, and mobile applications for clients across different industries using black-box and grey-box testing methodologies.
National Tourism
Jul 2025 · Web · Greybox
Heavy Equipment & Mining
Oct 2025 · Web & Mobile · Greybox
Private — LPRO
Worked on VAPT projects involving web applications, APIs, and Android applications. Identified security issues and documented findings to support remediation.
Banking & Financial Services
Dec 2025–Jun 2026 · Web & API · Blackbox
Real Estate & Property
Oct 2025 · Web & Mobile · Blackbox
Donation & Zakat Platform
Nov 2025 · Web · Greybox
PT Teknologi Server Indonesia (Xcode)
Junior Cybersecurity Analyst · Internship
Sep–Dec 2025 · CyberSentinel Bootcamp — Batch 2
Joined CyberSentinel Bootcamp Batch 2 through a free 6-month training program from March to August 2025, followed by a 3-month internship at Xcode. Gained hands-on experience in SOC L1–L2 monitoring, security alert investigation, and reporting. Also practiced internal black-box penetration testing, CTF challenges, and Bash scripting, using Proxmox and Wazuh to understand security monitoring and operations.
Build.
Explore. Document.
OWASP-Lab-Toolkit
A Bash toolkit for deploying a web vulnerability lab on Ubuntu Server. Provisions 11 vulnerable and management applications via Nginx, Apache, PHP, MariaDB, Node.js, and Java. Designed for isolated local VMs and educational use.
Have-Fun-Static-Web
My first project about static web. Built with AI-assisted coding (vibe coding) using Vite, Tailwind CSS, and TypeScript.
Linux Syscall Table
An x86_64 Linux syscall reference. Quick lookup for system calls on Linux x86-64.
iMoon07.github.io
Source code of this portfolio. Static web built with HTML, CSS, and JS. Articles are stored in the separate Penjelajah-CyberSecurity repository.
Learn.
Then share.
Codelines — Universitas Negeri Semarang
Speaker – Cyber Security Division
DevXperience 2025 · Nov 2025 · Science and Technology
Attack–defend simulation with Wazuh & SOC learning.
Special thanks to Universitas Negeri Semarang (UNNES) and Codelines UNNES IT Association.
Coding Ceria
Guest Speaker — Cybersecurity Sharing Session
Aug 2025 – Jul 2026 · Science and Technology
Hands-on Wazuh, Linux infrastructure & security labs.
Special thanks to Mr. Wahyu Nurhidayat, Mr. Taro Lay, and all active members of Coding Ceria for the platform and opportunity.
Coding Ceria — Setup LAMP, phpMyAdmin & Cloudflare Tunnel
Coding Ceria — ModSecurity & OWASP CRS Rules
Cyber Security Discussion — Wazuh 4.14.2, Netdata & Cloudflare Tunnel
Cyber Security Discussion — OpenBSD, Oracle & MariaDB Multi-Tier
Debug Life Indonesia
Guest Speaker · Apr 2026
Windows brute-force activity, logs & Wazuh detection.
License.
Terms of use.
Source Code
MIT License
The original source code of this website, including HTML, CSS, and JavaScript, is licensed under the MIT License.
You are free to use, modify, and distribute the code, provided that the original copyright and license notices are included.
Articles & Tutorials
CC BY-NC-SA 4.0
Articles, tutorials, and educational materials published on this website are licensed under CC BY-NC-SA 4.0.
You may share and adapt the content for non-commercial purposes, provided that you give appropriate credit, link to the license, indicate changes, and distribute adaptations under the same license.
Third-Party Materials
Third-party code, libraries, images, and other materials remain subject to their respective licenses and terms. Their inclusion on this website does not mean they are covered by the licenses listed above.
01 / 04