I'm a cybersecurity graduate with hands-on experience across penetration testing, network security, database security, and AI-assisted threat analysis. I like taking security concepts from theory to working, testable systems — whether that means breaking a deliberately vulnerable web app, hardening a segmented network, or documenting a full CTF-style engagement the way a real pentest report would read.
This profile is a snapshot of that work: hands-on labs, defensive builds, and structured writeups, kept broad across the field rather than tied to one niche.
- 🔭 Currently exploring offensive security, cloud misconfigurations, and AI/LLM security
- 🌱 Continuously building on SOC fundamentals, MITRE ATT&CK, and NIST risk frameworks
- 🎯 Interested in penetration testing, blue team / SOC analysis, and security engineering roles
- 💬 Ask me about Kali Linux, Burp Suite, Metasploit, pfSense, or SIEM tooling (Splunk/Wazuh)
Offensive Security
Defensive Security & Networking
Development & Scripting
Frameworks & Methodologies
Full writeups and analysis for a 14-challenge security advent-style CTF, completed 14/14 (Very Easy → Hard). Every challenge follows a consistent pentest-report structure: Overview → Analysis → Root Cause → Exploitation → Remediation.
AI Prompt Injection OSINT SSTI NoSQL Injection Zip Slip / RCE API Race Conditions AWS IAM Abuse Azure Key Vault & Managed Identity PCAP Forensics DPAPI Credential Recovery
A deliberately vulnerable Flask web application built for teaching offensive and defensive web security. Each lab pairs a vulnerable route with a fixed route side by side, plus a full writeup covering root cause, attack steps, and defenses.
SQL Injection Stored XSS IDOR OWASP Top 10 Flask Secure Code Patterns
A MySQL-based banking database designed around core database security principles: encrypted account balances (AES), salted SHA-256 password hashing, Role-Based Access Control, audit logging, and trigger-based intrusion detection for suspicious large withdrawals.
MySQL RBAC AES Encryption SQL Injection Mitigation Audit Logging Intrusion Detection Triggers
A segmented, multi-zone network built and validated end-to-end using pfSense, with Snort IDS tuned to detect reconnaissance and aggressive scanning, and pfBlockerNG for content/DNS filtering. Tested against live Nmap scans and traffic-filtering scenarios.
pfSense Snort IDS pfBlockerNG Kali Linux Metasploitable Network Segmentation