Now entering

HONG

Portfolio · The Park Branch

LOADING 0%
Punching in…

Park OS 2.0 · shift starts in a sec

Now entering · The Park Branch

HONG

I break systems on purpose, then write the report that makes them boring again — and build the offline tooling and courseware that gets other people doing the same.

  • TrackHTB CPTS
  • BenchParrot & Debian
  • ArchitectureZero Deps
Explore Builds ↓ Get In Touch ↗

Selected Work

Five builds · click to expand details

  • A CVSS 3.1 base-score calculator wired to severity, CWE, and affected hosts on every finding.
  • Screenshots paste straight in with Ctrl+V, get downscaled, and live in IndexedDB — so evidence never blows storage quotas.
  • OWASP-aligned Active Directory kill-chain and WSTG web checklists: tick an item, promote it straight to a finding.
  • A live NVD CVE 2.0 feed with severity, keyword and date filters, alongside an engagement arsenal reference.
  • Exports to PDF, HTML, Markdown, JSON and findings CSV — or pushes the whole report into an Obsidian vault.
Technologies & Architecture
Vanilla JSIndexedDBCVSS 3.1 NVD API 2.0Obsidian URISingle File
  • Topics 1–8, from open-source concepts and distribution choice through to permissions and package management.
  • Auto-graded exercises for hands-on topics; interactive multiple-choice quizzes for concept topics.
  • A dependency-free test suite proving graders work, wired into a git pre-push hook so broken grading never reaches students.
  • Ships a Dockerfile and Makefile, so an entire class environment is one build away.
Technologies & Architecture
BashPOSIX shDocker MakeGit Hooks
  • One bandit CLI instead of 35 SSH accounts — bandit start, bandit submit, bandit status.
  • Runs anywhere Linux runs: LXC, Docker, a laptop, WSL. Never requires root privileges.
  • Progress is tracked locally per player, and bandit doctor checks the toolchain before anyone gets stuck.
  • An authentic multi-user SSH build is documented for advanced lab setups.
Technologies & Architecture
BashDockerLXCUnprivileged
  • Twelve ambient mood backgrounds — sparkles, rain, fireflies, aurora, candlelight — one per chapter.
  • A floating player that crossfades the soundtrack per chapter and minimises to an interactive spinning vinyl disc.
  • A hidden ?edit=true mode for adding photos and audio directly in the browser.
  • Typewriter finale with heart confetti; respects reduced motion, keyboard navigation and swipe gestures.
Technologies & Architecture
React 18ViteTailwindFramer Motion
  • Characters, hill, clouds and falling leaves are 100% inline SVG and CSS — zero external images or assets.
  • Day and night palettes generated from a cohesive token set, dynamically adapting to system theme.
  • parkLoader.set(percent) drives the bar from real asset loading instead of a fake timer.
  • The same two characters are standing in the holographic console above, re-lit as neon and cloned from the loader markup.
Technologies & Architecture
Inline SVGCSS AnimationCanvas 2DZero Deps

What I Work With

Offence · Linux · The Web

01 // Offensive Security

  • Active Directory kill-chains, end to end
  • BloodHound, Certipy, Impacket, NetExec, Rubeus, bloodyAD
  • Web application testing against WSTG and OWASP Top 10
  • CVSS 3.1 scoring and professional finding write-up
  • Reporting directly to the HTB engagement standard

02 // Linux & Pedagogy

  • Bash scripting and portable POSIX shell
  • Docker containers, LXC, Parrot OS and Debian
  • Auto-graded lab courseware and automated grading engines
  • Git hooks, CI pipelines, and dependency-free test suites
  • Curriculum design for comprehensive cybersecurity modules

03 // Off-Grid Web Apps

  • Single-file offline applications running directly from file://
  • Modern React 18, Vite, and responsive layouts
  • Interactive Canvas 2D, procedural rendering, and SVG animation
  • IndexedDB and browser-persistent storage architectures
  • Accessibility, keyboard navigation paths, and reduced-motion states

Got a network you'd rather I broke first?

Security engagements, specialized courseware, or high-performance offline tooling that runs anywhere — let's talk. Tell me what you're protecting.

Email menghongtry@gmail.com → GitHub github.com/Try-menghong →