Garrick Julianta A.

Cybersecurity '28 at BINUS University

Learning both sides of security by building, breaking, and fixing.

locTangerang Selatan, ID

langEnglish (C2), Indonesian

nowstudying SIEM (Wazuh) and DFIR (digital forensics and incident response)

featured · blue team · SIEM

trellis

Logs in, alerts out.

A small SIEM written in Python, built to learn how tools like Splunk and Wazuh work under the hood. It reads SSH, web server and grapevine scan logs, normalizes them into one event format, correlates them with detection rules and shows the alerts on a web dashboard.

20 detection rules in YAML for SSH brute force, privilege escalation, web attacks and newly exposed services, each mapped to MITRE ATT&CK
Four rule types: single match, threshold (N events in a time window), sequence (failed logins followed by a success) and new value (a port that wasn't open in the last scan)
Correlates across sources: a sample attack from web recon to a root shell, a backdoor account and a new open port turns 61 log events into 20 alerts
Defensive parsers so attacker-controlled log text can't spoof a source IP or hide a request, a live mode that alerts as lines are written, and 67 unit tests

Python
Flask
SQLite
PyYAML
pytest

View on GitHub →

security · networking · scanner

grapevine

Hear what every port has to say.

A TCP port scanner with service and version detection, built from scratch in Python to learn how tools like Nmap work. It sorts ports into open, closed and filtered, then talks to each open port to identify what's running, including over TLS on non-standard ports.

About 100× faster on filtered hosts with 100 threads, and benchmarked to show when threads don't help
Flags deprecated TLS 1.0 and 1.1 and strips terminal control codes from hostile banners
Standard library only, with unit tests against fake services and real TLS on localhost

Python
sockets
TLS
threading
unittest

grapevine v0.2

$ python grapevine.py 127.0.0.1 -p 1100,2121,2222,2525,3306,3307,6379,8000,8443,9999
Scanning 127.0.0.1: 10 port(s), concurrent, 100 threads

PORT      STATE     SERVICE         VERSION
1100/tcp  open      pop3            Dovecot
2121/tcp  open      ftp             vsFTPd 3.0.5
2222/tcp  open      ssh             OpenSSH 9.6p1 (protocol 2.0; Ubuntu-3ubuntu13)
2525/tcp  open      smtp            Postfix
3306/tcp  open      mysql           MySQL 8.0.36
3307/tcp  open      mysql           MariaDB 10.11.6
6379/tcp  open      redis           Redis
8000/tcp  open      http            SimpleHTTP 0.6 (Python/3.13.18)
8443/tcp  open      ssl/http        nginx 1.24.0 (Ubuntu; TLSv1.3)
9999/tcp  open      unknown

10 open, 0 closed, 0 filtered - finished in 2.02s (port scan 0.01s, service detection 2.01s)

View on GitHub →

fintech · web app · live

Batara Kuwera

Check your financial posture.

A personal finance web app for young adults in Indonesia. Users answer a short onboarding questionnaire, then get a dashboard that rates their financial health and projects when they could reach financial independence.

Scores health as Critical, Medium or Optimal from savings rate, debt-to-income and emergency-fund coverage, and charts a FIRE projection with compound growth
AI Financial Coach chat powered by Claude, given an anonymized snapshot of the user's numbers
Salted, iterated password hashing on a hand-written SHA-256, password rules and expiring sessions
English and Bahasa Indonesia, light and dark themes, PDF reports, and a demo checkout with card and QRIS