Projects
Selected build notes and lab work
Flag-gated writeup and cheatsheet hosting with typewriter terminals, scramble animations, and markdown rendering. Live on GitHub Pages.
Bash recon tool that chains nmap, gobuster, and whatweb into one command, then drops timestamped markdown results with a findings summary.
Bash script that applies a CIS-aligned hardening baseline to a fresh Ubuntu install — SSH lockdown, sysctl tuning, and auditd rules.
Multi-container environment for practising Chisel-based SOCKS5 pivoting and lateral movement — spins up in one command.
Windows Server + two workstations in VirtualBox. Covers the full AD attack chain: enumeration, Kerberoasting, lateral movement, and DA takeover.
Intentionally vulnerable Docker app for practising XSS, SQLi, SSRF, and command injection with Burp Suite in an isolated environment.
Python CLI for fast user, group, and SPN collection in AD lab environments. Outputs BloodHound-compatible JSON for attack path analysis.
Medium-interaction SSH honeypot that logs attacker commands, credentials, and session replays into structured logs for analysis.
Idempotent Ansible playbook that provisions a fresh server — installs packages, configures users, deploys dotfiles, and sets up firewall rules.
Cron-driven backup script with incremental rsync, remote offloading to a VPS, and integrity verification via checksums.
Self-hosted Pi-hole on a Raspberry Pi with custom blocklists, DHCP takeover, and a local DNS resolver for the home network.
Self-hosted WireGuard VPN on a VPS with split-tunnel routing and a kill switch — full traffic control from any device.
Segmented home network with VLANs for IoT, trusted, and lab traffic — managed switch config, inter-VLAN routing rules, and firewall policies.
Python wrapper around Scapy and tshark for automated PCAP parsing, protocol dissection, and suspicious traffic flagging.
Custom Flipper Zero scripts for sub-GHz replay, IR cloning, and BadUSB payloads — documented with capture logs and attack notes.
DuckyScript payloads for credential harvesting and reverse shell drops — executes in under 10 seconds on an unlocked target.
Evil twin AP setup with WiFi Pineapple — captive portal credential capture, deauth attacks, and traffic interception via mitmproxy.