$ whoami
Derek Wei
1st of 1,692 teams at the National Cyber League.
1st of 62 at RowdyHacks XII, all 28 challenges solved.
B.S. Cybersecurity student in the Honors College at The University of Texas at San Antonio, focused on red-team fundamentals, penetration testing labs, Capture the Flag methodology, and practical security tooling. Preparing for the Certified Penetration Testing Specialist (CPTS).
5x CompTIA certified · AWS Certified AI Practitioner
U.S. citizen eligible to obtain a Secret security clearance.
Selected work
Real work, each with its own writeup or project page.
RowdyHacks XII · 1st place
1st of 62 teams, all 28 challenges solved, 5,825 points, Team Difference (2026)
A full board clear across eight categories: 28 writeups, from binary exploitation and an Erlang/OTP SSH pre-auth RCE to Modbus/ICS register analysis and a five-stage 600-point forensics chain.
A team result. Derek was the team's top scorer, 3,575 of 5,825 points.
Read the writeups →
BroncoCTF 2026 · OSINT
AO-SINT: evidence-first game geolocation
Used topography, architecture, map geometry, and sightline reconstruction to identify four Arcane Odyssey locations from four screenshots.
BroncoCTF 2026: 8th of 753 teams with 3,777 points, Team idktheflag
UIUCTF 2026 · Web exploitation
Nabi AI: SSRF via a client-controllable vault address
A deprecated, client-controllable baoAddr field in a Next.js Server Action turned an AI challenge into a conventional SSRF and secrets-management failure.
Supporting work
CPTS study notes pipeline
A Claude Code, Claude Haiku, and Obsidian workflow turning pasted CPTS study material into structured notes and checklists, with human review.
in progress
Jul 10, 2026
Secure travel network setup
A GL.iNet GL-SFT1200 (Opal) travel router configured as a VPN gateway for safer, more consistent routing across multiple devices on public Wi-Fi.
in progress
Jul 8, 2026
Relevant experience
Information Technology Generalist · VUTEX INC
Sep 2026 to Present ยท Full-timePerform internal cybersecurity checks and support company endpoints and users
Cybersecurity Summer Camp Intern · CyberTexas Foundation
Jun 2026 to PresentGuide students through hands-on cybersecurity exercises at St. Mary's University
Technical Support · NEISD Institute of CyberSecurity and Innovation (iCSI)
Aug 2022 to May 2026Provided technical support across Linux and Windows systems for students and staff in a cybersecurity program serving seven NEISD high schools, diagnosing hardware, software, and network connectivity issues
Verified credentials
Current direction
- Competing in the UND CyberHawks National CTF finals with Team idktheflag
- Beginning UTSA Cybersecurity Honors coursework
- Preparing for the Hack The Box Certified Penetration Testing Specialist (CPTS) (in progress, not currently held)
- Building practical projects and publishing Capture the Flag writeups
Contact and resume
Open to cybersecurity internships, CTF collaboration, and security projects.