Breaking Into a Vulnerable Box: A TryHackMe Walk-through
A step-by-step breakdown of how I enumerated, exploited, and escalated privileges on a Linux machine using Nmap, Gobuster, and a crafted reverse shell.
Hello, I'm
BSc Computer Systems & Security graduate building robust, secure digital systems — from hardened networks to full-stack applications and forensic investigations.
Degree
BSc Computer Systems
& Security
Malawi
I'm Daniel Creflo Mtonga, a BSc Computer Systems & Security graduate with a deep passion for understanding how systems work — and how to make them resilient against modern threats. My academic journey has taken me across cybersecurity, software development, network engineering, and digital forensics.
I enjoy tackling real-world security challenges, whether that means analysing malware behaviour, building secure web applications, configuring hardened network infrastructures, or investigating digital evidence trails. I believe security is not a feature — it's a mindset.
When I'm not in a terminal or code editor, I'm reading up on the latest threat intelligence, writing security write-ups, or exploring new tools in my home lab environment.
Degree
BSc Computer Systems & Security
Based In
Malawi, Africa
Available For
Full-time & Freelance
Languages
English, Chichewa
Penetration testing, vulnerability assessment, CTF challenges, and security auditing across web, network, and system layers.
Building full-stack applications with a security-first approach — from responsive frontends to robust, hardened backends.
Designing, configuring, and securing network infrastructures — firewalls, VPNs, routing protocols, and system hardening.
Evidence acquisition, memory forensics, log analysis, and structured incident response to uncover and contain threats.
Technologies, tools, and methodologies I've worked with across my academic and project work.
Also comfortable with
A selection of academic projects, personal labs, and security work I'm proud of.
Conducted a full black-box penetration test on a deliberately vulnerable web application, identifying SQL injection, XSS, and broken authentication vulnerabilities with a detailed remediation report.
Built a full-stack password manager with AES-256 encryption, master password hashing via bcrypt, and a clean web interface. Includes clipboard auto-clear and session timeout features.
Designed and simulated a multi-site enterprise network with VLANs, inter-VLAN routing, OSPF, ACLs, and a DMZ. Configured site-to-site VPN tunnels between two branch offices.
Performed forensic analysis on a simulated incident involving a compromised Windows system — recovered deleted files, analysed registry artifacts, and produced a court-ready chain-of-custody report.
Developed a real-time network monitoring web dashboard that visualises live traffic, flags anomalous connections, and sends email alerts on threshold breaches.
A curated set of write-ups from Capture the Flag competitions covering web exploitation, reverse engineering, steganography, and cryptography challenges solved on TryHackMe and HackTheBox.
The institutions and programmes that shaped my technical foundation.
BSc Computer Systems & Security
Malawi University of Science & Technology
Studied core modules including cybersecurity, computer networks, operating systems, software engineering, digital forensics, and cryptography. Graduated with hands-on lab and project experience across all four specialisations.
International General Certificate of Secondary Education (IGCSE)
Kalibu Academy
Completed secondary education with a strong focus on sciences and mathematics — building the analytical foundation for further study in computing and technology.
Data Science Essentials
Cisco Networking Academy
Linux Essentials
Cisco Networking Academy
More certifications on the way
CompTIA Security+, CEH, eJPT …
A step-by-step breakdown of how I enumerated, exploited, and escalated privileges on a Linux machine using Nmap, Gobuster, and a crafted reverse shell.
A practical guide to VLAN configuration, inter-VLAN routing, and why segmenting your network is one of the most effective defences against lateral movement.
An introduction to memory forensics — how to acquire a RAM dump, analyse running processes, detect injected code, and extract attacker artefacts using Volatility 3.
Open to full-time roles, freelance projects, and collaborations. Drop me a message and I'll get back to you.