Skip to main content

Projects

Cloud engineering, hands-on security work, academic investigations, and selected software projects.

Featured work

Cloud security engineering

Academic & hands-on

Security and engineering projects

Selected labs, applications, and documented assessments from my cybersecurity engineering studies.

Abstract service modules connected by a single blue security path
Project

HyperVaults.io

A hands-on security lab demonstrating how low-severity misconfigurations can chain into critical compromise across reverse proxies, object storage, internal services, and source-code discovery.

  • AppSec
  • Cloud Security
  • Gitea
  • Object Storage
View details
Cover of the STX RAT malware analysis academic report
Academic reportPDF

STX RAT Malware Analysis

A 72-page evidence-led malware case study combining safe static analysis, public sandbox evidence, reputation intelligence, and careful separation of observed behavior from unconfirmed capability claims.

  • Malware Analysis
  • Threat Intelligence
  • PE Analysis
  • Sandboxing
View details
Cover of the CI/CD Goat DevSecOps security assessment
Academic reportPDF

CI/CD Goat Security Assessment

An 86-page DevSecOps assessment of poisoned pipelines, token and secret exposure, Jenkins trust abuse, dependency attacks, IaC bypasses, and supply-chain compromise with prioritized remediation.

  • DevSecOps
  • CI/CD Security
  • Jenkins
  • Supply Chain
View details
Cover of the Windows Server 2019 Active Directory project report
Academic reportPDF

Active Directory Administration & Security

A Windows Server 2019 lab covering domain deployment, users and organizational units, Group Policy, DHCP, backup, firewall controls, client integration, and controlled security testing.

  • Active Directory
  • Windows Server
  • Group Policy
  • DHCP
View details
GitHub preview for the FACELOCK Ubuntu authentication project
Project

FACELOCK for Ubuntu

An academic Ubuntu face-login implementation with guarded PAM integration, encrypted face embeddings, tamper-evident auditing, a local Flask control surface, and safe password fallback.

  • Python
  • PAM
  • Flask
  • AES-256-GCM
View details
GitHub preview for the WireCat network packet analyzer
Project

WireCat

A beginner-friendly JavaFX network analyzer for live packet capture, protocol filtering, hex and ASCII inspection, traffic statistics, and export to PCAP, text, and CSV.

  • Java
  • JavaFX
  • Pcap4J
  • Maven
View details
GitHub preview for the PatchStash vulnerability tracking application
Project

PatchStash

A Symfony-based software vulnerability tracker for assets, projects, findings, patch cycles, reporting, role-based permissions, and repeatable remediation workflows.

  • Symfony
  • PHP
  • Doctrine
  • Vulnerability Management
View details

Development

Software for real communities