Aman Faizal
Certified Ethical Hacker · IT Infrastructure Administrator · IoT Automation Specialist
Self-taught technology professional managing enterprise IT for 7,000+ users while building innovative automation solutions.
I'm a technology enthusiast who transformed curiosity into expertise — without a traditional tech degree. My journey began with a simple question: "How does this work?" — leading me from disassembling gadgets as a hobbyist to managing mission-critical infrastructure for thousands of users.
What sets me apart is my hybrid approach: I combine enterprise-level IT administration with hands-on maker skills, cybersecurity expertise, and a passion for automation. Whether I'm managing HP ProLiant servers and Sophos firewalls at work, or building ESP8266-powered smart home systems at home, I bring the same level of precision and innovation.
🏢 Enterprise IT Infrastructure
- Managing 500+ staff, 6,500+ students
- 170+ PCs, 190+ smartboards/projectors
- HP ProLiant DL360 Gen10, Active Directory
- QNAP NAS, CCTV, biometrics, POS systems
- Microsoft 365 & AWS administration
- Campus-wide network & vendor coordination
🏠 IoT & Home Automation
- ESP8266/ESP32 firmware development
- Multi-room smart home systems (4+ rooms)
- Alexa, Google Assistant, Sinric Pro
- Tasmota & ESP RainMaker platforms
- IR/RF remote control systems
- ~15% energy efficiency improvements
☁️ Cloud & Virtualization
- Proxmox VE multi-OS hosting
- Private cloud storage (Nextcloud)
- Tailscale VPN & Cloudflare Tunnel
- Media servers (Plex, Jellyfin)
- VoIP systems (Asterisk/FreePBX)
- 24/7 monitoring (Zabbix, Nagios)
Operating Systems
Cloud & Virtualization
Networking & Security
IoT & Automation
IT Administrator
Managing enterprise IT infrastructure for 7,000+ users. Overseeing HP ProLiant DL360 Gen10 servers, Sophos XGS 4500 firewall, QNAP NAS, Microsoft 365, AWS cloud services, and campus-wide network infrastructure. Supporting 170+ PCs, 190+ smartboards/projectors, CCTV, biometrics, and POS systems.
Freelance IT Support & Network Admin
PC assembly, network design, IoT automation projects. Deployed network for 160+ users, developed smart home systems, provided remote/onsite troubleshooting with 95% resolution rate.
Technical Support — Apple Certified
iOS/macOS hardware and software diagnostics with 90% first-time resolution. Completed 318 Apple ATLAS courses. Supported 10+ cases daily with 90% customer satisfaction.
🔧 Hands-On Problem Solver
I don't just manage systems — I build, repair, and optimize them from scratch. From soldering circuits to configuring enterprise firewalls.
📚 Continuous Learner
15+ certifications, 318 Apple courses, constantly exploring new technologies. Self-taught journey proves passion rivals any formal degree.
💡 Cost-Effective Innovator
Proven track record of delivering enterprise solutions on tight budgets. Built complete cloud infrastructure with zero monthly costs.
🔐 Security-First Mindset
CEH certified with practical penetration testing experience. Network hardening, vulnerability assessment, and threat mitigation.
🎯 Full-Stack IT Skills
From microelectronics to cloud infrastructure. Hardware assembly, network design, security auditing, automation — complete end-to-end capability.
📝 Documentation & Teaching
Active creator of technical content and project documentation. Clear communicator who explains complex concepts simply.
DIY IoT systems, server infrastructure, cybersecurity tools, and web apps — built from first principles using low-cost, open-source hardware and software.
Full-featured web apps built with Vanilla JS and Google Apps Script — enterprise-style admin consoles, network monitoring dashboards, and IT utility suites.
An end-to-end attendance management platform for ZKTeco biometric devices. The Python backend streams live punch events from multiple terminals into a local SQLite database, while the ERP Console — a high-performance single-page app built with vanilla web technologies — serves as the unified front end for HR, IT Helpdesk, and admin operations. Connects to a Google Apps Script cloud backend for ticketing and Drive integration. Runs on Linux, Windows, macOS, and Android (Termux).
Real-Time Logger & Sync
Per-device threads with self-healing reconnect stream live punches to SQLite (WAL) and an external API with configurable batching. Bulk sync CLI supports date-range filtering; startup scripts auto-sync the last 30–60 days on boot.
HR & Attendance Management
Live present/absent dashboard with per-department stats, historical reports, employee calendar, monthly summaries, shift/grace-period config, holiday management, and offline-capable remote punching via IndexedDB.
ZKTeco Fleet Control
Monitor online/offline status for all biometric terminals. Remote actions from the browser: ping, sync clock, reboot. Download enrolled users, fingerprint templates, and raw logs per device.
Notifications
Telegram bot alerts for device status, per-punch events, and scheduled daily absent reports. Scheduled HTML + plain-text email reports via Gmail SMTP. All settings configurable from the Admin UI without restarting.
IT Helpdesk & Collaboration
Ticketing system with priority and assignment workflows, token queue for service counters, internal peer-to-peer messaging, notice board, sticky notes, WebRTC VoIP calling, and Google Drive integration via GAS.
Admin & Infrastructure
Raw SQLite query console, DB backup/restore, CSV/MDB bulk import, full audit log, RBAC user management, session manager, auto-sync scheduler, integrated Linode terminal via ttyd, and 13 UI themes including glassmorphism.
.png?raw=true)
.png?raw=true)
.png?raw=true)
.png?raw=true)
.png?raw=true)
.png?raw=true)
A browser-based multi-tool dashboard combining commonly used IT utilities into a single interface. All processing is client-side for fast performance and better privacy. Features search filtering, favorites, keyboard shortcuts, and exportable logs.
Utility Tools
QR/barcode generator, Base64 encoder/decoder, hex/binary/decimal converter, password generator with strength analysis, text diff tool.
Networking Tools
IP info, DNS lookup, URL-to-IP resolution, hosting provider detection, URL shortener, subnet calculator, MAC vendor lookup.
Monitoring & Files
Ping monitor with latency chart, real-time console output, Google Drive upload with QR sharing, client-side PDF editing.
.png?raw=true)
.png?raw=true)
.png?raw=true)
A fully Telegram-native attendance system that connects directly to ZKTeco biometric devices (TCP/IP via pyzk) and reads the Middle East Attendance Software .mdb database. No web server, no Flask, no SQLite — every feature is a Telegram command. Supports 40+ commands across attendance queries, device management, reporting, and admin operations.
Attendance & Reporting
Today's summary, absent/present/late/early lists, who-is-in detection, weekly/monthly trends, top absentees, department breakdowns, and custom date-range history. XLSX/PNG/PDF reports via scheduled or on-demand delivery.
Per-Employee Queries
Search by name or badge, today's punch timeline, month-to-date report, and a full emoji calendar grid showing daily presence/absence at a glance.
Device Fleet Control
Ping all devices, sync clocks, reboot remotely, push user records across the fleet, identify orphaned device users not in the MDB, and manage device config via inline Telegram keyboards.
Notifications & Email
Per-punch live alerts, device online/offline change alerts, MDB stale detection, and daily scheduled absent reports. Optional Gmail SMTP delivery with HTML/plain/both formats — all configurable from Telegram without touching config files.
MDB Backup System
Inline backup panel with Telegram download, email attachment, local directory copy, and recurring scheduled delivery. All settings managed via the bot UI.
Admin & Security
Password-gated whitelist-only shell session, read-only SQL console, audit log, RBAC with per-user presence tracking, and a full inline admin panel. Lockout on repeated auth failures.
A complete queue and token management platform built for service counters — combines a Telegram admin bot with a FastAPI web server and SQLite backend. Real-time updates are pushed via Server-Sent Events (SSE) to a TV-ready display page with browser TTS read-aloud and audio beep on every token call.
TV Display Page
Full-screen NOW SERVING board with per-counter status, live waiting list, clock, and automatic TTS announcement — "Token 42, please proceed to Counter 2" — triggered instantly via SSE when any admin calls the next token.
Customer Token Flow
Customers scan a QR code or visit the /take page, enter their name and department, and receive a token number plus a /track link. The tracker auto-refreshes showing live queue position without any app install.
Telegram Admin Bot
Inline keyboard controls for Next / Previous / Recall / Current / Waiting per counter. Full counter management: add, rename, remove, open, close. QR code generation, queue reset with confirmation, and staff user management.
Staff Web Dashboard
Browser login for counter staff — manage their assigned counters without Telegram access. Session-cookie auth with optional HTTPS-only mode. Counter assignments configurable per staff user from the admin bot.
Custom hardware tools for Wi-Fi security research and HID exploitation — built for educational understanding of network vulnerabilities.
A dual-purpose device combining a Wi-Fi deauthentication tool and a USB HID injection platform ("Wi-Fi Duck"), built using a Pro Micro (ATmega32U4) and D1 Mini (ESP8266). OLED display provides real-time feedback; RGB LED indicates device state. Powered by a TP4056 Li-ion charging circuit for portability.
Wi-Fi Deauther
Exploits the 802.11 deauthentication frame vulnerability to disconnect devices from a target Wi-Fi network. Used for DoS demonstration and network security auditing. For educational/authorized use only.
Wi-Fi Duck (HID Injection)
When plugged via USB, emulates a keyboard/mouse (HID device). Remote scripts are delivered over the ESP8266 hotspot, allowing keystroke injection undetected by most antivirus software.
Full-home automation using ESP8266/ESP32, relay boards, Tasmota firmware, and voice assistant integration. Projects span smart rooms, vehicle access, and custom smart hardware.
Bedroom 1
8-channel relay + NodeMCU controlling tube lights, ceiling fan, Philips Wiz bulb, DIY RGB lamp, study lamp, and 3 sockets. Sockets auto-shutoff at 100% charge. AC via Homemate Wi-Fi IR remote with scheduled temperature automation (24°C → 26°C → off by 5 AM).
Bedroom 2
Philips Wiz smart bulb as night lamp (10% brightness). AC via 40A SSR + NodeMCU flashed with Tasmota inside the AC stabilizer. Auto-shutoff at 5 AM, stabilizer powers down 5 min later. DIY SSR using LED + LDR for optoisolation.
Living Room
Echo Dot 3rd Gen for voice control. 4-channel relay + ESP8266 manages TV, bias lighting, and 5.1 soundbar via Sinric Pro. Custom Alexa routines: "Movie Time" dims lights & enables soundbar; "Movie Break" pauses media and restores lights to 50%.
Kitchen
Water pump timer using 40A SSR + Arduino Nano. 3-button interface: 2-min, 7-min, and reset. Prevents tank overflow and saves energy. Housed in a standard 2-module electrical box.
Upgraded a standard GoldMedal 6-socket extension box with a 6-channel relay (4+2), ESP32, and AC-to-DC 5V 2A adapter. Individual socket control via IR remote, ESP RainMaker app, Alexa, or Google Assistant. Added a reset switch and external USB-A port for OTA reprogramming.
- IR remote assigns unique commands per socket; '0' kills all sockets
- Timer and automation support via ESP RainMaker
- Voice control via Alexa and Google Assistant
- External reset + reprogramming port for field updates
A 4-channel relay + NodeMCU ESP8266 connected to the bike's ignition, kill switch, and self-start — controllable via Alexa, Google Assistant, or a WearOS app. Powered by 12V-to-USB adapter from the bike battery. Salvaged RF module from an RC car converted into a keychain remote for proximity auto-lock/unlock (locks beyond ~10m).
- Ignition, kill switch, and self-start via app/voice
- Proximity auto-lock/unlock via salvaged RF module
- Helmet-triggered start via Bluetooth receiver
- WearOS Alexa app integration
Built a Wi-Fi RC car using a NodeMCU ESP8266 and motor controller, salvaging the gearbox, motors, and wheels from an old RC chassis. Control handled through a locally hosted HTTP page served by the ESP8266 — no app install needed.
A POCO M3 with a broken charging port, dead SIM, and broken GPS was repaired (display replaced), debloated (85–90% MIUI removed), and mounted in a custom holder with an integrated 5W speaker and 10,000 mAh power bank. Runs Alexa as a full voice assistant for smart home control and media playback.
Homelab and production-grade network deployments using open-source tools — from multi-OS Proxmox environments to enterprise-style network design for a 35-room villa compound.
Transformed an idle HP i3 laptop by upgrading SSD/RAM and modifying the power button for lid-closed booting. Installed Proxmox VE for full virtualization, running multiple OS instances with automated backups and snapshots. A Raspberry Pi 5 runs UmbrelOS/CasaOS with a 500 GB SSD for private cloud storage.
Virtualization & VMs
Proxmox VE hosting Ubuntu Server, Kali Linux, Windows 11, Windows Server, Android TV OS, and multiple LXC containers. Accessible via VNC from any browser.
Remote Access
Cloudflare Tunnel for HTTPS public access via custom subdomains. Tailscale VPN (WireGuard) for secure mesh networking across all devices.
Private Cloud Storage
Nextcloud + OpenMediaVault on Raspberry Pi 5 with 500 GB SSD. Accessible across Windows (SMB), Linux, and Android.
Media & Web Services
Plex + Jellyfin for media streaming. Internal web server for personal projects. Firefox proxy browser inside CasaOS.
IoT Integration
Tasmota-managed IoT devices on LAN, remotely accessible via Tailscale + Cloudflare Tunnel.
VoIP System
Asterisk + FreePBX configured for a local IVR and telephony setup.
Designed and deployed a cost-effective enterprise-grade Wi-Fi network across two villa compounds with 35 rooms, supporting 110+ Wi-Fi users and 160+ peak concurrent users. All 16 routers repurposed from existing hardware, configured as APs with static IPs and non-overlapping channels. Achieved 200–230 Mb/s stable throughput.
| Component | Role |
|---|---|
| TP-Link Archer AX53 (AX3000) | Primary router — traffic management & inter-compound link via CAT6 |
| TP-Link LS1008G Switch | Distribution switch linked to main Etisalat ISP router |
| D-Link DGS108G + Linksys LGS105V2 | Access-layer switches for both compounds |
| 16 × Mixed-brand routers | Access Points — DHCP disabled, static IPs, staggered channels |
| HP Laptop (Proxmox) | 24/7 monitoring via Zabbix, Nagios, Ntopng — zero additional cost |
Custom homelab-style Network Operations Center web dashboard using Vanilla JS, hosted via Blogger layout override. Provides unified LAN/WAN health visibility with embedded monitoring tools, real-time clock, and a dark-mode admin UI.
WAN Monitoring
Embedded Fast.com speed test, public uptime tracking, external network status monitoring.
Planned Enhancements
Prometheus + Grafana, Docker backend, SNMP, authentication layer, PWA deployment, AWS/Azure hosting.
Pi-hole DNS & Filtering
Self-hosted Pi-hole for network-wide ad blocking, DNS filtering, and traffic monitoring — acts as a lightweight firewall layer across all 160+ users.
Creative reuse of old smartphones, scrap components, and consumer electronics — from Li-Fi audio transmission to hardware phone modifications.
A collection of electronics experiments and smartphone repurposing projects — proof-of-concept builds, zero-cost hardware upgrades, and creative mods using off-the-shelf or salvaged components.
💡 Li-Fi Audio Transmission
Transmitted audio wirelessly using light modulation. Aux output drives a laser diode or LED; a solar panel on the receiver side converts the light signal back to audio via aux input.
📷 Wi-Fi IP Camera
Converted a retired Android phone into a Wi-Fi IP camera accessible over the local network. A zero-cost alternative to dedicated IP cameras.
🖥️ Smart Home Display (Echo Show Clone)
A POCO M3 with broken charging port, dead SIM, and broken GPS — repaired, debloated (85–90% MIUI removed), and mounted with an integrated 5W speaker and 10,000 mAh power bank.
✨ Nothing Phone Glyph Clone
Added a rear LED strip to a POCO M3 to replicate the aesthetic of the Nothing Phone (1) glyph interface — purely hardware, no software modifications required.
🔊 Speaker + Battery Upgrade
Integrated an external 5W speaker and 10,000 mAh power bank into a custom phone holder with extended power button for easy one-handed access.
What Drives Me
"Technology should empower, not complicate."
I believe the best solutions combine security, efficiency, and user experience. Whether I'm hardening a school network against threats, automating a home to save energy, or repurposing old hardware into something useful, my goal is always the same: make technology work smarter, not harder.
My journey from curious hobbyist to certified ethical hacker and IT administrator proves that passion and persistence can rival any formal degree. I'm constantly learning, building, and sharing — because technology is too exciting to keep to yourself.
Let's Connect
Whether you need enterprise IT support, cybersecurity consulting, custom IoT solutions, or just want to talk tech — I'm always up for a conversation.
Turning curiosity into capability, one project at a time.