THREAT INTELLIGENCE
Honeypot Threat Dashboard
A Cowrie honeypot on AWS EC2 feeding a dashboard of live attacker activity, including attacker SSH fingerprints (HASSH).
CowrieAWS EC2HASSH
OPEN TO OFFENSIVE SECURITY INTERNSHIPS
Offensive security, learned by breaking things.
Student pentester focused on web and API security, CTFs and threat research. I publish my writeups and write in general about cybersecurity.
01 / PROJECTS
Featured projects
VULNERABLE BY DESIGN
VulnMart
An intentionally vulnerable Flask e-commerce app for pentest practice, with deliberate flaws across the OWASP Top 10.
FlaskPythonOWASP Top 10
H&L Labs
Hands-on web challenges, each with hints, a solution and mitigation write-up, and flag submission.
WebCTFMitigation
02 / WRITING
Latest writing
Implementing Repeating-key XOR cipher
Implementing a repeating-key XOR cipher in Python: a Cryptopals Set 1 Challenge 5 writeup covering XOR basics, strings and a full implementation.
CryptographyCTFs
2 min read →
Basic Pentesting 1 Walkthrough
Basic Pentesting 1 boot2root walkthrough: Nmap recon, exploiting a vulnerable FTP service with Metasploit, and web enumeration with Gobuster.
Privilege EscalationMetasploit
4 min read →
Blue TryHackMe Walkthrough
TryHackMe Blue walkthrough: scanning a Windows 7 host with Nmap, confirming MS17-010 (EternalBlue) and gaining a Meterpreter session with Metasploit.
NetworkMetasploit
5 min read →
03 / CREDENTIALS
Certifications
Looking for an offensive security intern?
I'm open to internships and collaboration. Email is the fastest way to reach me.