EY Channim
Software Development & Web/API Security Student
I build real university projects while studying software development at IT Academy STEP and web/API penetration testing at ISTAD.
About Me
I'm a software development student at IT Academy STEP and a cybersecurity student at ISTAD, specializing in web and API penetration testing. I do not have formal company work experience yet, but I have hands-on experience from real university projects and security labs.
I practice both building and testing software: frontend interfaces, backend APIs, databases, mobile apps, and secure development habits. My goal is to understand how systems are designed, how they fail, and how to make them safer.
For cybersecurity practice, I learn through Hack The Box, TryHackMe, WebGoat, CyLab Security Academy, PortSwigger Web Security Academy, and OverTheWire, using tools such as Burp Suite, Nmap, Subfinder, and other pentesting tools.
Build usable interfaces
Design reliable APIs
Practice secure testing
Learning & Practice
- Software Development - IT Academy STEP
- Web/API Penetration Testing - ISTAD
- Hack The Box Practice
- TryHackMe Practice
- PortSwigger Web Security Academy
- OverTheWire Wargames
Learning Experience
Software Development Student
Building real academic projects and practicing application development from frontend interfaces to backend services, databases, and mobile apps.
Web/API Penetration Testing Student
Specializing in web and API security, with practice in reconnaissance, vulnerability testing, authentication issues, authorization logic, and OWASP-style labs.
Cybersecurity Lab Learner
Practicing ethical hacking skills through guided labs, capture-the-flag exercises, and vulnerable applications to improve real testing methodology.
Projects
Skills & Tools
A focused view of the tools I use most. Expand each category to see the full stack.
Security
10 skills
Development
16 skills
Tools
10 skills
Get In Touch
I'm open to student projects, internships, cybersecurity learning opportunities, and collaboration on web, API, mobile, or security practice projects. My inbox is always open.