Pinned Loading

1. Overthewire-Wargames-bandit-writeup Overthewire-Wargames-bandit-writeup Public

   An interactive write-up containing my solutions and notes for all the levels of OverTheWire's Bandit wargame.

   HTML

2. DVWA-Penetration-Testing-Report DVWA-Penetration-Testing-Report Public

   Web application penetration test of Damn Vulnerable Web Application (DVWA), documenting vulnerabilities with risk ratings and remediation guidance.

3. elk-siem-homelab elk-siem-homelab Public

   A homelab SIEM built with Elastic Stack (ELK) on Docker. Ingests logs from a Linux VM, Windows, and sample network traffic to build detection dashboards for common attack patterns.

4. Sigma-attack-LLM-triage Sigma-attack-LLM-triage Public

   AI-assisted SOC alert triage with an honest, documented failure analysis, precision/recall metrics, false negative breakdown, and where the model actually gets it wrong.

   HTML

5. aws-iam-audit-slackbot aws-iam-audit-slackbot Public

   A Slack bot that continuously audits AWS accounts for security drift, flagging stale or unused IAM access keys, over permissioned IAM roles, and unused OIDC trust policies. Runs on a schedule via L…

   PHP

6. AWS-Bedrock-Application-with-threat-modeling AWS-Bedrock-Application-with-threat-modeling Public

   A threat-modeled AWS Bedrock (GenAI) application, STRIDE analysis, data flow diagrams, and controls traced back to specific LLM-specific threats like prompt injection and excessive agency.

   Python