Projects & Portfolio

[VIEW TOPOLOGY]

A comprehensive hands-on lab environment for practicing network security concepts — including firewall configuration, intrusion detection, and vulnerability assessment. Simulates multi-zone enterprise networks using industry-standard tools on a fully virtualized stack.

[VIEW DEMO]

A security-focused full-stack web application featuring robust user authentication, comprehensive input validation, and hardened data handling. Built to implement OWASP security standards and prevent the most critical web application vulnerabilities.

[KEY EXCHANGE]

Implemented end-to-end RSA asymmetric encryption for secure email attachment transmission in a simulated enterprise environment. Enabled a sender to encrypt sensitive files with the recipient's public key so that only the recipient's private key could decrypt them — preventing exposure of credit card data in transit.

[NETWORK DIAGRAM]

Designed and implemented network segmentation for a simulated school environment (ABC High School) using VLANs to isolate academic and administrative traffic. Extended the design with a four-subnet architecture derived from a /24 address space to enforce security boundaries between labs, offices, and administration.

[TRAFFIC ANALYSIS]

Executed and analyzed multiple categories of Denial-of-Service attacks across three OSI layers in a controlled virtual lab environment. Used hping3 to craft and send malformed TCP, ICMP, and UDP packets, and Slowloris to perform application-layer exhaustion — capturing all traffic in Wireshark for analysis.

[RULE CONFIGURATION]

Completed a series of increasingly complex Windows Defender Firewall labs — from basic rule configuration to a full security audit scenario for a simulated startup (ABC Tech). Applied the principle of least privilege by selectively allowing only necessary protocols while blocking all unnecessary inbound and outbound traffic vectors.

[CONTROLLED LAB ONLY]

Executed a full offensive security chain in a controlled virtual lab: from generating reverse TCP shellcode payloads with MSFvenom, to delivering them via phishing emails, to opening Meterpreter shells on compromised systems. Extended with credential harvesting by cloning a legitimate website using the Social Engineering Toolkit (SET) to capture submitted credentials.

[SCAN RESULTS]

Performed comprehensive network enumeration and a full security audit for a simulated organization (ABC Tech) using industry-standard recon tools. Enumerated active devices via ARP scanning, profiled open ports and services using TCP SYN scans and service version detection, and identified operating systems across Windows and Linux targets.

[ENCRYPTED CHANNEL]

Configured end-to-end secure communications protocols across two separate labs — OpenSSH on Windows Server for remote administration and Apache2 HTTPS on Kali Linux for encrypted web traffic. Compared plaintext HTTP vs. encrypted HTTPS traffic using Wireshark to visually demonstrate the value of TLS encryption.

[SECURE TUNNEL]

Deployed a full enterprise VPN solution on Windows Server 2022 using the Remote Access role with Routing and Remote Access Service (RAS). Integrated Active Directory for user and group management, and Network Policy Server (NPS) to enforce access control policies — simulating a production remote access environment.

[PACKET ANALYSIS]

Independently designed and executed a three-phase research lab to demonstrate the fundamental security difference between stateless and stateful packet filtering. Crafted a spoofed ACK packet to bypass a stateless iptables rule, then mitigated the vulnerability using Linux conntrack — verifying the fix through live Wireshark and tcpdump captures. Analyzed findings against HIPAA Technical Safeguard requirements and OSI layer theory.

[DUAL ENDPOINT HARDENING]

Secured new Windows and Debian workstations for ABC Tech by applying baseline endpoint controls across both systems. The scenario focused on reducing exposed services, enforcing stronger authentication, and aligning workstation configuration with organizational hardening directives.

[HOST HARDENING]

Completed a Windows host-hardening lab focused on reducing local attack surface, tightening account policy, protecting stored data, and improving malware defense. The lab covered both operating system controls and protective tooling on ZYWIN01.

[LINUX BASELINE]

Hardened a Debian endpoint by removing exposed services, tightening password expiration and complexity rules, and enabling host firewall protection. The work focused on lowering attack surface while improving default account security posture.

[HYPERVISOR PREP]

Prepared and secured a CentOS virtualization host by temporarily adjusting protective controls for installation, then restoring enforcement and removing unnecessary services before guest deployment. The lab emphasized secure host preparation and lifecycle-aware virtualization practices.

[OPENSTACK CONTROL]

Configured a MicroStack environment on Debian and worked through core cloud security administration tasks including password rotation, IAM management, security groups, instance workflow, and SSH key pair provisioning. The lab focused on shared-responsibility security controls in a cloud platform.

[PASSWORD POLICY ENGINE]

Built an interactive password strength checker called PassGuard that evaluates passwords in real time, measures entropy, validates security policy requirements, and logs check results. The tool combines a polished cyber-style interface with practical password quality enforcement logic.