Security Researcher · Software Engineer · CTF Player
I build security tools, solve CTF challenges, and explore Linux and low-level systems with a planner's patience. The work blends software engineering, research, and open-source craftsmanship.
Open to security engineering, vulnerability research, systems programming, and open-source opportunities.
#49
Global CTF
#3
Bangladesh
20+
Notes & projects
Co-founded a competitive CTF team focused on cybersecurity. Coordinate team strategy for international CTF competitions, manage challenge assignments based on member expertise, conduct post-competition analysis, and organize training sessions.
↳ Global Rank #49 · National Rank #3 (Bangladesh)
Created and maintain a terminal-based YouTube audio player published on the Arch User Repository. Full-stack TUI development with Textual, AUR packaging via PKGBUILD, and release management.
↳ Published on AUR · One-command install
Contributed configurable bar scroll actions and global workspace scroll inversion to a Linux desktop shell built on Quickshell. Designed a reusable input abstraction layer and ensured cross-compositor compatibility.
↳ Cherry Picked & Merged (PR #53)
@ GeeksforGeeks
Official representative for GeeksforGeeks at Bangladesh University of Professionals. Promote technical resources, organize coding events and seminars, and build the campus tech community.
I am Abdul Hakim Shifat, known online as Joyboy__. I am from Bangladesh and study Computer Science and Engineering while building tools, writing technical notes, and competing in cybersecurity challenges.
My strongest work happens where systems thinking meets security research: CTF tooling, Linux experiments, reverse engineering notes, practical automation, and carefully documented learning.
I prefer durable work: small tools that solve real problems, writeups that teach clearly, and projects that keep improving after the first release.
3+
Years Building
20+
Projects & Notes
#49
Global CTF Rank
#3
National Rank
Bangladesh University of Professionals (BUP)
Nawab Fayzunnesa Govt. College
Kakirtala High School
Certified Red Team Operations Management (CRTOM)
Red Team Leaders
Problem Solving (Intermediate)
HackerRank
Linux 100
TCM Security
A terminal-based YouTube audio player built with Textual, mpv, and yt-dlp. Keyboard-first, resource-efficient alternative to browser-based music listening. Published on the AUR.
A minimal 512-byte x64 boot sector demonstrating BIOS boot process fundamentals including real mode initialization, segment register setup, and stack configuration.
Theme-driven site that dynamically renders content from an Obsidian vault, automating the pipeline from private technical notes to public blog posts.
Engineering package for SOC L1 automation research, supporting dataset provenance auditing, independent split validation, selective-prediction evaluation, and adversarial prompt-injection experiments.
A Linux Python camera application that turns meme or anime reaction images into local rehearsal prompts, then scores a user-taught face and hand pose against the reference.
A local, CLI-first, evidence-based scanner for Arch Linux AUR recipes that statically inspects PKGBUILD, .install, .SRCINFO, sources, and recipe commands without executing them.
Secure Information Hiding System Using Steganography: a full-stack application for hiding text or files inside PNG/BMP images with optional password protection and later extraction.
"Introduction to Linux file descriptor"
Writeups for RABCTF 2025 Reverse challenge category - Strings, Password Checker, XOR Baby
A guide to routing audio to two Bluetooth headphones simultaneously on Arch Linux using PipeWire, qjackctl, and pavucontrol.
I'm always open to discussing cybersecurity, open-source projects, competitive programming, or anything tech-related. Feel free to reach out.