Red Team Operator

Sowat
Kheang

DevOps Engineer and Erasmus Mundus CyberMACS graduate, specializing in web application and API security. Builder and breaker — I've written the systems that get tested.

Get In Touch Explore Profile

sowat@kali:~/about

01 // Reconnaissance

About Me

5 years of building APIs and mobile apps, now a DevOps Engineer focused on security. I've written the systems that get tested, so I approach security from both sides: builder and breaker.

I hold an Erasmus Mundus Joint Master's in Applied Cybersecurity (CyberMACS), where I specialized in web application and API security.

Some things I've been working on:

Penetration testing & vulnerability assessment (OWASP Top 10, IDOR, SQLi, Broken Access Control, Active Directory)
Building a defensive SIEM pipeline with Kibana, Elasticsearch, and Filebeat during my internship at A1 Macedonia
CTF competitions as a way to sharpen practical skills: 3rd place at CE3 (CRDF Global & SANS), ByteBreach Beyond Machine Cybersecurity Challenges, HTB Seasonal, Challenges and CTF, Tryhackme

Years Experience

40+

HTB Machines Pwned

Apps Deployed

Certifications

02 // Delivery

Selected Works

IAMS

Mobile Application

WikiCollege

Mobile Application

WikiSchool

Mobile Application

WP Post

Android Application

03 // Publishing

Published Packages

Flutter Responsive Framework

pub.dev package

KS Select Dropdown

pub.dev package

04 // Resources

Tips / Techniques / Tools

Windows AD Attack Playbook

This playbook is a work in progress based on my personal experience with HTB machines. I’m sharing it to document my learning journey and hopefully provide a helpful reference for others exploring Windows Active Directory.

Telegram Forensics Android Case Study

A digital forensics case study investigating which residual artifacts persist on an Android device after Cloud Chat and Secret Chat (E2EE) usage in Telegram v12, including what survives after in-app message deletion.

05 // Exploitation Learning