Hi, I am Ahnaf
Software engineer building reliable systems, reverse engineering protocol internals, and creating focused tools designed to solve real problems without gratuitous abstraction.
Express.js, PostgreSQL
Engineering focused on internals, security, and products that deliver.
I am a developer based in Indonesia with an active focus on systems design, security research, and intelligent tooling. My technical intuition is grounded in looking beneath the layers, building efficient apps, and reverse engineering data flows where standard tools fall short.
I build through rapid iteration, getting a working version running early and refining it based on what actually needs fixing. I focus on building efficient systems, shipping quickly, and keeping the implementation focused. Every iteration should make the system more robust while leaving the codebase simpler than before.
Mechanisms Over Assumptions
Understanding what systems actually do under load, down to network protocols, memory bounds, and failure modes.
Surgical Simplicity
No speculative frameworks or premature abstractions. Write boring, high-performance code that remains maintainable six months out.
Cognitive Utility
Technology should sharpen human capability and comprehension rather than act as a noisy black box.
My Working Set
The tools I use to build reliable software, and the underlying systems I deconstruct to truly understand.
- Rust
- Python
- TypeScript
- Go
- SQL
- Shell
- Reverse Engineering
- Protocol Analysis
- Linux Internals
- C2 & Agent Design
- Scraping Pipelines
- Cryptography
- Astro
- React / Next.js
- Tailwind CSS
- FastAPI
- PostgreSQL
- Redis
- Docker
Crafted Products & Systems
Security research, tooling, and products shipped across different stacks.
DIGITS IDOR Bug POC
Proof-of-concept documenting a critical IDOR vulnerability in the DIGITS school registration platform that exposes confidential student documents through sequential ID enumeration.
Careless Whisper POC
Implementation of the silent delivery receipt RTT monitoring side-channel attack on WhatsApp, based on the Gegenhuber et al. 2025 research paper.
WhatsLock
Extraction tool for WhatsApp messages via Android emulator, accessing a broader range of message data than comparable tools.
FaceDentify
Face matching engine that compares faces against databases of any size, storing metadata in TinyDB. Includes photo labeling and scalable search.
Teach4Learn
AI tutor that flips the dynamic: the model asks you to explain concepts using the Feynman Technique, identifying gaps in real time.
MokletCare
School facility incident reporting and maintenance management system built for SMK Telkom Malang. Submission for ITECHNO CUP 2026.
Contact Me
Have an interesting project, engineering challenge, or just want to discuss ideas? My inbox is always open.