the fidelyafr experience

Lamenting the Meaning of Connection through Gravity of You

Sat, 29 Aug 2026 11:00:34 +0700

To fall in the star is to be nothingness, to escape is to be empty.

Gravity of You

Introduction

Gravity of You is the 8th track of Vessels, the album that introduced me to STARSET in 2017. I’ve never given this track much thought until today. Why? I’ve been thinking a lot about human connection for the past month. I think this song speaks a lot about human connection than we give it credit for.

Hello World from fidelyafr.fyi!

Fri, 28 Aug 2026 10:09:53 +0700

After 4 years of studying…

Having your own personal website as an IT student is very crucial, especially to show your projects and stuffs like that. Well, it took me 4 damn years to finally have my own personal website! I call it better late than… later, I suppose. Why did I postpone this sidequest for so long? I don’t know. I didn’t properly learn how to develop my own web application until my junior year. And that’s all thanks to a course I took as an exchange student at UW-Stout (if you’re wondering the course is CS-404 and I really like it).

Pawang Hujan: The Discord Bot that Helps You Hack The Cloud!

Thu, 11 Sep 2025 00:00:00 +0000

Background

I took an NLP class in my senior year because I have nothing better to do and thought the course looked promising because of the whole AI advancement thingy nowadays. One of the projects being assigned to us is to make a simple regex-based pattern matching bot that responds to the user using some predefined answers. Kind of like a very simple helpdesk chatbot.

What is Pawang Hujan?

Pawang Hujan (Indonesian for rain shaman) is a Discord bot that I made to help people hack the cloud. It serves as a simple chatbot assistant that helps me on my cloud pentesting journey. See it in action:

SMT Program 2025: Various Write Up

Thu, 14 Aug 2025 00:00:00 +0000

Malware

Static

Description

Before you start analyzing a malware file, it is generally a good practice to take its hash and search it on VirusTotal to see if others have analyzed the same file before. For this challenge, we give you this SHA256 hash: `556700ac50ffa845e5de853498242ee5abb288eb5b8ae1ae12bfdb5746e3b7b1`.

Answer the questions at `nc 52.77.77.117 10031`

This is an easy/baby challenge to introduce you about how to use VirusTotal as a first stop for malware analysis. Visiting VirusTotal to look for the hash of the file will return the ILOVEYOU worm report.

Database BSB: Full-stack Python Web-App for Bank Sampah Berseri

Fri, 11 Jul 2025 00:00:00 +0000

Welcome!

This is the first in the “Community Service” series. Don’t worry, I didn’t break any law. It’s actually my university’s program and one of the requirements to get a diploma. Basically you volunteer for 2 months in a remote-ish village all across Indonesia and do some stuffs. Since I’m the IT guy, I do the village’s IT stuffs. One of them is this cool database I made for their Bank Sampah (Waste Bank).

HackTheBox Business CTF Cyber Skills Benchmart 2025: Operation Blackout Write Up

Sat, 24 May 2025 00:00:00 +0000

Cloud

[Easy] Vault

Vault is a vulnerable S3 bucket challenge with a twist. We’re given a static website hosted on S3 with a few public files that can be downloaded.

If we try to download one of the files, we can see that it gives or responds to us a link to another S3 bucket specifically used to store files.

Upon further inspection using the aws cli client, we’ve found the complete directory of this volnaya-vault bucket. It has public and private subfolders.

HackTheBox Cyber Apocalypse 2025: Tales From Eldoria Write Up

Sun, 30 Mar 2025 00:00:00 +0000

Web Exploitation

[SOLVED][very easy] Trial by Fire

Trial by Fire is a classic SSTI challenge. For those who are completely new to this, SSTI or Server-side Template Injection is a vulnerability in templating engine of a website that allows for arbitrary code execution. Like almost other web vulnerabilities, this is possible because user’s input is not sanitized.

Template engines are used to have consistent UI for the frontend side of the web. It combines dynamic input and the template to achieve that. For example, in this challenge, the website first ask for a name that will be rendered on the next page:

CTU-13 Data Cleaning and Analysis: What Does The Malware Do?

Fri, 11 Oct 2024 00:00:00 +0000

Coming soon!

About

Sun, 30 May 2004 00:00:00 +0000

Fidelya Fredelina, also known online as fidelyafr (and many other usernames she will NOT disclose) is an Indonesian IT enthusiast whose interest spans multiple domains from data, network, security and recently, wireless engineering. She will touch anything as long as it’s not software engineering.

She obtained her Bachelor’s in Engineering from Universitas Gadjah Mada, majoring in Information Technology. She won’t consider herself a social person but she was quite active during her university life where her involvement peaked at becoming a Vice President of Night Login.

Academic CV

Mon, 01 Jan 0001 00:00:00 +0000

🎓 Education

🏫 Universitas Gadjah Mada (Aug 2022 - Jul 2026)

Bachelor in Engineering (Information Technology) | GPA: 3.77/4.00

Relevant courses: Fundamentals of Programming, Computer Architecture, Computer Network, Artificial Intelligence, Database Technology, Operating System, Cloud Computing, Web App Development, Big Data Analytics, Computer Security, Natural Language Processing, Ethical Hacking, Digital Forensics, Capstone Project, Thesis and Oral Examination

🏫 University of Wisconsin-Stout (Jan 2025 - May 2025)