Hands-on projects and practical investigations into network traffic, secure & insecure protocols, cloud technologies, vulnerability assessment, system hardening, exploitation techniques, and defensive countermeasures.
CASE FILE
AWS IAM privilege escalation lab demonstarting how a misconfigured iam:PassRole policy can be exploited to escalate from a low privilege user to full AdministratorAccess via EC2 and the instance metadata service, and how this can be prevented with a verified least privilege policy.
View Documentation →CASE FILE
A two part web application security project:
Part one demonstrates SQL Injection and XSS exploitation against DVWA, and the deployment and validation of ModSecurity WAF to detect and block both vulnerabilities.
Part two is a full security assessment of a live PrestaShop deployment on AWS, including a completed defensive hardening checklist and a documented attack simulation that confirms a critical, unpatched stored XSS vulnerability, plus missing TLS and login rate limiting.
CASE FILE
A hands-on lab demonstrating a full vulnerability management lifecycle: deploying an intentionally vulnerable web application (DVWA), performing an automated vulnerability scan using OpenVAS/GVM, manually discovering and exploiting a vulnerability using Metasploit, and producing a remediation plan, all within an isolated virtual lab network
View Documentation →CASE FILE
Designed and deployed a Cowrie SSH honeypot on an isolated virtual network to study real-world attack behavior in a controlled environment. Simulated an end-to-end attack using Kali Linux; including Nmap reconnaissance, manual credential attempts, and an automated Hydra brute-force, while capturing all traffic with Wireshark. Analyzed the honeypot's structured logs to identify attacker IPs, credentials used, and behavioral signatures distinguishing automated tooling from manual activity. Produced a formal incident report detailing the attack timeline, indicators of compromise, and defense recommendations.
View Documentation →CASE FILE
Designed and deployed a fully functional e-commerce platform on AWS using a two-tier architecture that separates the application and database layers for improved scalability and security. Provisioned an EC2 (Ubuntu) instance running Apache and PHP as the web server, paired with a dedicated RDS (MySQL) instance for the database layer, and securely integrated the two. Installed and configured PrestaShop end-to-end, then hardened the environment by restricting SSH access, configuring a UFW firewall, securing Apache, limiting database access through security groups, applying least-privilege file permissions, and removing default installation artifacts to minimize the attack surface.
View Documentation →CASE FILE
Built a Wireless Security Assessment project simulating real-world attacks against a WPA/WPA2 network in a controlled lab environment. The assessment involved wireless reconnaissance, handshake capture, controlled deauthentication, and offline password cracking to demonstrate how weak credentials and legacy protections can expose networks to compromise. The project also includes risk analysis, MITRE ATT&CK mapping, and defensive recommendations such as WPA3 adoption and Protected Management Frames (PMF), highlighting both offensive techniques and practical security hardening strategies.
View Documentation →CASE FILE
Built a distributed pentesting lab, simulated a real engagement, exploited both network services and modern web APIs, chained vulnerabilities to gain root access, maintained persistence, exfiltrated data, and produced a full technical report.
View Documentation →CASE FILE
Built a hands-on Blue Team lab simulating real-world attacks and detection. Used Suricata IDS and system logs to analyze reconnaissance, SSH brute-force, and web activity, correlating events to reconstruct an attack timeline and assess detection effectiveness.
View Documentation →CASE FILE
This lab documents a hands-on incident response and malware analysis investigation triggered by Intrusion Prevention System (IPS) alerts.
The focus of the lab is the validation of MD5 hash-based Indicators of Compromise (IOCs) to determine whether associated files are malicious, suspicious, or benign using sandbox analysis and threat intelligence techniques.
CASE FILE
This project validates passwords against customizable security policies, including length, complexity, repetition, and sequential patterns. It implements zxcvbn and HIBP which enforces modern security controls used in real enterprise environments. It is designed as a foundational security utility and a learning project focused on secure authentication practices.
View Documentation →CASE FILE
This is a hands-on cybersecurity and digital forensics project focused on Windows NTFS Alternate Data Stream (ADS).
The goal is to understand how ADS can be abused for covert storage, stealthy payload execution, malware persistence, and how defenders can detect and eliminate ADS-based threats.
CASE FILE
In this project, I documented the process of setting up and securing remote SSH access on a Kali Linux virtual machine. I detailed best practices for SSH configuration, firewall setup, and brute-force protection using Fail2Ban which provides a solid foundation in Linux system hardening.
View Documentation →CASE FILE
This repository is a collection of guides, resources, and visuals designed to promote safe online practices for everyday users.
It covers topics such as password management, phishing awareness, secure browsing, social media safety, and data protection, aiming to educate individuals on how to protect themselves in the digital world.
It blends general awareness tips for everyday users with technical resources for IT professionals and cybersecurity enthusiasts.
CASE FILE
Built a real-time monitoring and alerting system to detect AWS root account usage using CloudTrail, EventBridge, and SNS. Simulated sensitive root activity, captured logs in S3, and configured automated alerts to notify me instantly whenever the root account is used, demonstrating how to improve visibility and security for high-risk actions in AWS.
View Documentation →CASE FILE
In this project, I demonstrated how misconfigured S3 buckets and overly permissive IAM policies can lead to security issues, and how to fix them following the principle of least privilege.
View Documentation →CASE FILE
In my Wireshark Traffic Analysis project, I captured and analyzed basic HTTP/HTTPS traffic, identifying DNS requests, valid handshakes, and TLS communication. In this project, I built on those foundations by analyzing DNS, FTP, ICMP, HTTP, and HTTPS traffic, compared secure vs insecure protocols (HTTP vs HTTPS), examined suspicious PCAP samples, identified DNS tunneling behavior, and practiced using custom Wireshark filters to speed up investigations.
View Documentation →CASE FILE
In this project, I used Wireshark to capture and analyze basic network traffic from a local machine. The traffic includes DNS queries, HTTP requests, TCP handshakes and TLS client Hello communication.
View Documentation →