LOEMHENG - Ethical Hacker & Full-Stack Developer
root@loemheng:~$

Ben Loemheng

Full-stack development - Ehtical Hacking - specialized security research and ethical hacking.

Computer Science @ Norton University
01About Me

I'm a security-focused developer with a passion for building robust applications and finding vulnerabilities before they become exploits. My journey began in full-stack development, where I learned the principles of secure architecture, and has evolved into a specialization in ethical hacking and penetration testing.

With experience spanning frontend frameworks, backend systems, and security protocols, I bring a comprehensive perspective to application security. I understand how applications are built, which gives me unique insight into where they can break.

Currently, I focus on identifying security vulnerabilities, conducting penetration tests, and architecting systems with defense-first principles. I believe that security shouldn't be an afterthought—it should be built into every layer.

Full-Stack Expertise

Proficient in building complete applications from frontend to backend, ensuring security at every layer.

Security Focus

Specialized in ethical hacking, penetration testing, and vulnerability assessment.

Research Driven

Constantly learning and researching new attack vectors and defense mechanisms.

1+
Years Coding
3+
Projects
Bugs Found
02Education

API - Web Penetration Tester

ISTAD (Institute of Science and Technology Advanced Development)

November-2025 - Current
Phnom Penh, Cambodia

Conducting comprehensive API and web application penetration tests to identify vulnerabilities, secure endpoints, and ensure robust security measures. Collaborate with developers to implement fixes and improve overall system security.

FullStack Web Development

ISTAD (Institute of Science and Technology Advanced Development)

March - November 2025
Phnom Penh, Cambodia

Specialized in Web FullStack Development building robust web applications. Gained hands-on experience with modern frameworks and tools.

Computer Science

Norton University

2023 - Current
Phnom Penh, Cambodia

Studying Computer Science with a focus on algorithms, data structures, software development, and system design. Gaining hands-on experience in programming, problem solving, and building scalable applications.

High School

Memot High School

2020 - 2023
Memot District, Tboung Khmum Province, Cambodia

Good at Math.

03Skills & Technologies

Technologies and tools I work with across full-stack development and security research.

Frontend

TypeScriptJavaScriptReactNext.jsWebSocket

Backend & APIs

Spring BootSpring SecurityFastAPIGogRPCLaravelPythonJavaC++

Data & Storage

PostgreSQLRedisDatabasesData Modeling

DevOps & Tools

DockergVisorGitGitHubVercelGoogle CloudVersion ControlSoftware Design PatternsData Structures & Algorithms

Security & Testing

Burp SuitePostmanNmapOWASP ZAPMetasploitKeycloakOAuth2NucleiSQLMapSubfinderhttpxGobusterffufNiktoWiresharkHydraJohn the Ripper
04Portfolio

Auto Offensive

Automated offensive security scanning platform with pipeline-based tool orchestration

  • Unix-style pipeline chaining between 7+ security tools
  • Sandboxed execution using Docker + gVisor isolation
  • Real-time log streaming via SSE and Redis pub/sub
  • AI-powered security analysis (MCP-based)
  • JWT auth via Keycloak with role-based access control
  • PDF report generation for scan results
FastAPIGoLang(gRPC)Next.jsBetterAuthSSEPostgreSQLDockerRedisMiniOJenkinsSonarQubegVisorTrivyKeycloakMCP / Claude

Stack Quiz

Interactive quiz platform for real-time classroom engagement

  • Real-time multiplayer quiz sessions via WebSocket
  • Live leaderboard and scoring system
  • Timer-based quiz questions with session PIN join
  • Analytics dashboard for performance tracking
  • Authentication and user role management
TypeScriptNext.jsSpring BootSpring SecuritySpring DataKeycloakOAuth2PostgreSQLDocker

NewsCambo

A modern web platform built with Laravel, PostgreSQL, and Next.js.

  • Full-stack with Laravel API and Next.js frontend
  • Dynamic content management
  • Token-based auth with Sanctum/Passport
  • Optimized for desktop and mobile
LaravelPostgreSQLTypeScriptNext.jsSanctum / Passport

Other Highlights

Mini Shop

E-commerce platform for browsing and purchasing sneakers online

  • Product browsing with filtering
  • Cart management and checkout flow
  • Responsive design for all devices
ReactJavaScriptFakeStore API

Enrollment System CLI

Command-line interface for students to register and manage courses

  • Course listing and enrollment from terminal
  • Registration status tracking
  • Lightweight CLI-based interaction
JavaPostgreSQL
05Contact

Let's build something
dependable and useful.

Based in Phnom Penh. Open to security research, backend, and full-stack engineering work.