SOFTWARE / SECURITY / CONTINUOUS LEARNING

Habtemariam
Chuchu.

Software Developer | Cybersecurity Practitioner

I build useful software and explore how to make it safer. My focus connects web, mobile and backend development with practical cybersecurity learning.

d3fau1t11
EXPLORE THE PORTFOLIO

ABOUT ME

A developer’s curiosity.
A security mindset.

I’m studying Computer Science at Unity University and developing my cybersecurity skills through ongoing training, practical work and Capture The Flag competitions. I’m interested in the decisions that make applications work well — and the boundaries that keep them secure.

Addis Ababa, Ethiopia

Understanding a system means learning both how to build it and how it can fail.

CURRENTLY ATTENDING

BSc Computer Science

Unity University

Expected graduation · 2027
IN PROGRESS

Cybersecurity Training Program

IBT College of Canada

Addis Ababa, Ethiopia

Computer networking, Windows and Linux administration, penetration testing, and offensive and defensive security activities.

Web & mobile

React · React Native · Expo
JavaScript · TypeScript

Backend & data

Express · API development
PostgreSQL · Drizzle · Firebase

Security practice

Authentication · Access control
Networks · Windows · Linux · CTFs

SELECTED WORK

Software with a practical purpose.

Applications, websites and security research across personal work, academic projects and team prototypes. Explore the source and available live sites.

02WEB / INTEGRATIONS

WatchVault

Personal project

THE PROBLEM

Keep a personal media watchlist organized and easy to update.

THE APPROACH

A React media-tracking application with Firebase Authentication, Firestore watchlist records and TMDb metadata integration.

  • React
  • Firebase Authentication
  • Firestore
  • TMDb
03WEB / LOCAL DATA

GPA Calculator

Browser utility

THE PROBLEM

Make weighted GPA and cumulative GPA calculations easier to manage.

THE APPROACH

A browser-based GPA / CGPA calculator with semester history, local data persistence and import / export functionality.

  • JavaScript
  • HTML
  • CSS
  • localStorage
04WEB / AGRICULTURE

Green Africa Farms

Website project

THE PROBLEM

Help growers discover fruit seedlings and reach the nursery online.

THE APPROACH

A Next.js storefront for Green Africa General Trading PLC with searchable fruit-seedling listings, category filters and a browser-persisted shopping cart. Checkout prepares an order message for WhatsApp.

  • Next.js
  • React
  • TypeScript
  • Tailwind CSS
  • localStorage
05WEB / AI

TrueImpact

Team hackathon prototype

THE PROBLEM

Give local founders a way to share the human story behind impact records.

THE APPROACH

A team hackathon prototype for founder voice stories, multilingual narratives and story visibility choices. The Next.js and Supabase workflow connects voice uploads, story review and speech / narration integrations.

  • Next.js
  • TypeScript
  • Supabase
06SECURITY / NETWORKING

Remote Admin Tool

Research proof of concept

THE PROBLEM

Study client/server communication and remote administration in a controlled lab.

THE APPROACH

GhostShell, a research proof of concept exploring Python and C++ clients, TCP / HTTP transport and message framing for lab-based remote administration.

  • Python
  • C++
  • TCP
  • HTTP
07WEB / EDUCATION

BookReview

Academic / in progress

THE PROBLEM

Make book discovery and reviews approachable through a simple reading interface.

THE APPROACH

An Internet Programming class project with featured books and static review pages, built with HTML, CSS and JavaScript. User-submitted reviews remain planned work.

  • HTML
  • CSS
  • JavaScript
08SECURITY / NETWORKING

Python Reverse TCP

Learning / in progress

THE PROBLEM

Understand how TCP clients exchange messages and manage concurrent sessions.

THE APPROACH

An educational Python client/server project exploring multi-client socket connections, message framing and command exchange in a controlled lab.

  • Python
  • Sockets
  • Threading
  • PyCryptodome
09SECURITY / CTF WORKSPACE

Forge

Research / in development

THE PROBLEM

Keep challenge records, evidence and investigation activity in one local workspace.

THE APPROACH

A local CTF workspace under development, bringing challenge records, evidence organization and live run updates into a React dashboard backed by FastAPI, SQLite and WebSockets.

  • Python
  • FastAPI
  • React
  • TypeScript
  • SQLite
  • WebSockets
10WEB / COMMUNITY

Social Media Link Hub

Website project

THE PROBLEM

Bring an institute’s social pages and contact options into one easy-to-share destination.

THE APPROACH

A bilingual Amharic / English link hub for Mezmure Dawit Spiritual Chant Training Institute, with social links, contact actions and QR sharing.

  • HTML
  • CSS
  • JavaScript
11WEB / PORTFOLIO

Hary Pictures

Photography portfolio

THE PROBLEM

Present photography work and make services easy to explore.

THE APPROACH

A React and TypeScript portfolio with photography galleries, categorized work and service / contact pages for Hary Pictures.

  • React
  • TypeScript
  • Vite
  • Tailwind CSS

CYBERSECURITY

Think like a builder. Question like a tester.

I’m developing offensive and defensive skills through ongoing training and CTF competitions, with a focus on responsible practice and understanding security boundaries.

Applications & access

Developing skills in web application testing, authentication and access-control assessment.

Systems & networks

Studying network security and Windows and Linux administration through ongoing training.

Offense & defense

Learning vulnerability analysis, penetration testing and defensive thinking through practical security study.

Competition experience

LEARNING UNDER PRESSURE
UNIVERSITY CTF · ETHIOPIA
5th

National placement

Solo competitor in the University Capture The Flag Cybersecurity Competition.

Individual result
HACK THE BOX · 2026

Cyber Apocalypse CTF
The Salt Crown

Participated with Abyssinia Cyber. The team finished 668 of 6,744 teams.

Team result · 24–29 July 2026Participation details

CTF FIELD NOTES

From challenge to understanding.

Practical notes on finding the weakness, following the evidence and explaining the solution.

Tibeb / QIYAS CTF
Web400 pts

The Template Loom

Investigate Jinja2 template injection and compare the access forms accepted by the challenge.

  • SSTI
  • Jinja2
  • Input filtering
Binary exploitation400 pts

Borrowed Badge

Follow a dangling heap pointer and the observed allocation reuse to replace a badge’s fields.

  • Use-after-free
  • Heap allocation
  • Struct layout
Forensics300 pts

Pixel Weave

Recover a hidden message from an image’s red-channel bits and a four-byte length header.

  • Steganography
  • LSB
  • Image analysis

PROFESSIONAL DEVELOPMENT

Learning, with something to show.

Selected programs, training and competency awards across cybersecurity, information security, network operations and infrastructure protection.

Explore course completions, CTF participation and more.

LET’S CONNECT

Have something
in mind?

A software project, a security conversation or an opportunity to learn together. I’d be glad to hear from you.