← back to base

★   the person behind it   ★

hi, i'm naomi.

third-year software development student, hobbyist hacker, and person who gets genuinely annoyed when people use password123. i built this site because cybersecurity affects everyone. and most resources either talk down to beginners or assume you already know what a MITM attack is.

i'm learning in public. i don't have a OSCP yet, i'm not a professional pentester, and i'll be honest about that. what i do have is genuine curiosity, quite a couple of HackTheBox hours, and a habit of building things to understand them better.

//001 — what i'm working on

HackTheBox Academy

actively working through modules

in progress

HTB Academy is where a lot of my current learning lives. i'm working through a mix of everything. linux, networking, web app attacks, password cracking. it's hands-on in a way that actually sticks, which fits how i learn.

Linux Fundamentals
Networking Basics

+ more modules in progress — check my HTB profile for current progress.

//002 — things i've built
cyber safety labyou're looking at it

this site. a frontend-only cybersecurity education project with interactive tools and a field guide to common threats. built with Next.js and Tailwind.

my web development work - projects, case studies, and the rest of what i've built during my software dev studies. separate from this site intentionally.

github reposopen source

various side projects, experiments, and coursework. ranging from polished to 'i was learning something at 1am'. a lot of its public.

home labin progress

currently getting into self-hosting and network testing at home. building out a small lab environment to practice what i'm learning on HTB in a real context.

//003 — background

currently

3rd year software dev student

focus

security + full-stack dev + occasional game dev

platform

HackTheBox Academy

interests

network hacking, passwords, CTFs

tools

Linux(i use arch btw), Kali, Wireshark, Nmap

homelab

getting started :-)

//004 — find me

// about this site

built with Next.js 15, Tailwind v4, and zero tracking. hosted on a subdomain of my main domain. intentionally separate. the subdomain itself is a small flex: it means i set up DNS records, thought about separation of concerns, and didn't just chuck everything on one domain like a normal person would. view source on GitHub →