Projects

Automated web vulnerability scanner that detects SQLi, XSS, CSRF, open redirects and misconfigured headers. Built with Python and async requests.

Writeups from HackTheBox, TryHackMe and CTFtime competitions. Covers web, binary exploitation, reverse engineering and cryptography challenges.

Passive and active reconnaissance automation. DNS enumeration, subdomain discovery, port scanning orchestration and report generation.

JWT vulnerability testing tool. Tests algorithm confusion (RS256→HS256), none algorithm bypass, weak secret bruteforce and claim tampering.

Lightweight intrusion detection system for home labs. Monitors network packets, detects port scans, ARP spoofing and brute-force patterns.

Controlled environment to simulate phishing campaigns for security awareness training. Generates reports on user behavior and click rates.