Cybersecurity • Systems • DevOps
Open to Cybersecurity / DevOps Apprenticeship
| Project | Demonstration |
|---|---|
| Secure Transfer Engine | Java transfer ledger and duplicate-request handling |
| Webhook Security Gateway | Authentication, replay rejection and delivery acknowledgement |
| Restore Drill | Restore from a snapshot, verify business invariants and reject tampering |
These previews come from the bundled demonstrations. Each linked project documents its own prerequisites and launch instructions.
Computer Science student (L3) passionate about cybersecurity, systems, and low-level programming.
- Goal: Cybersecurity / DevOps apprenticeship
- Interests: Offensive security, defensive systems, infrastructure
- Strong focus on practical, real-world projects
ML-powered threat detection engine analyzing nginx logs in real time with a 3-model ensemble (Autoencoder + Random Forest + Isolation Forest). Detects SQLi, XSS, path traversal, Log4Shell, and SSRF. Auto-trains on deployment.
Bug bounty platform with RBAC (Researcher / Company / Admin), CVSS scoring, report triage, bounty award workflows, and full audit logging. ~7,000 lines of backend.
End-to-end encrypted peer-to-peer chat implementing the Signal Protocol (Double Ratchet + X3DH). WebAuthn/Passkey authentication, forward secrecy, break-in recovery, real-time WebSocket messaging.
Full-stack SIEM with real-time log correlation, three rule types (Threshold, Sequence, Aggregation), four MITRE ATT&CK attack playbooks, and a live alert feed via Server-Sent Events.
Multi-service honeypot emulating SSH, HTTP, and FTP to capture attacker credentials and commands in real time. Threat scoring 0–100 with MITRE ATT&CK pattern mapping, GeoIP enrichment, and a live React dashboard.
| Project | Description | Tech |
|---|---|---|
| Base64 Tool | Multi-format encoding/decoding CLI with auto-detection and recursive peel | Python |
| Caesar Cipher | Encrypt, decrypt, and brute-force crack with frequency analysis | Python |
| Hash Cracker | Multi-threaded dictionary + brute-force cracker (MD5, SHA1, SHA256, SHA512) | C++ |
| DNS Lookup | Professional DNS query CLI with WHOIS integration and batch queries | Python |
| Simple Port Scanner | Asynchronous TCP scanner with configurable concurrency | C++ |
| Network Traffic Analyzer | Dual implementation packet analyzer with real-time TUI | C++ / Python |
| C2 Beacon | Command & Control system with WebSocket protocol and operator dashboard | Python / React |
| Keylogger | Cross-platform educational keylogger with log rotation and window tracking | Python |
| Metadata Scrubber | Privacy-focused CLI stripping metadata from JPEG, PDF, Office files | Python |
| Firewall Rule Engine | iptables/nftables rule parser with conflict detection and optimizer | V |
| Linux CIS Auditor | 104-control CIS Benchmark compliance auditor with HTML/JSON reports | Bash |
| Vulnerability Scanner | Python dependency updater with CVE detection via OSV.dev | Go |
| Project | Description | Tech |
|---|---|---|
| API Security Scanner | OWASP API Top 10 scanner with React dashboard and scan history | Python / React |
Binary Analysis Tool  |
ELF/PE/Mach-O static analyzer with YARA scanning and threat scoring | Rust / React |
| Canaris Honeypot | SSH + HTTP + FTP honeypot with live threat dashboard | Python / React |
| Docker Security Audit | CIS Docker Benchmark v1.6.0 auditor with SARIF/JUnit output | Go |
| SBOM Generator | SPDX/CycloneDX SBOM generator with OSV + NVD vulnerability matching | Go |
| Secrets Scanner | 150-rule secrets scanner with Shannon entropy and HIBP breach verification | Go |
SIEM Dashboard  |
Real-time SIEM with log correlation and MITRE ATT&CK playbooks | Python / React |
| Credential Enumeration | Post-access credential exposure detector for Linux systems | Nim |
| Project | Description | Tech |
|---|---|---|
| AI Threat Detection | 3-model ML ensemble for real-time nginx log threat detection | Python / PyTorch / React |
| API Rate Limiter | Enterprise FastAPI rate limiter (Sliding Window, Token Bucket, Fixed Window) | Python |
Bug Bounty Platform  |
Full bug bounty platform with RBAC, CVSS scoring, and audit logging | Python / React |
| Encrypted P2P Chat | Signal Protocol (Double Ratchet + X3DH) P2P chat with WebAuthn | Python / SolidJS |
| Reverse Proxy | High-performance reverse proxy with security middleware | Haskell |
| Secure Transfer Engine | Durable Java transfer core with balanced postings, owner authorization, concurrent overdraft prevention and idempotent retries | Java 17 |
| Webhook Security Gateway | HMAC-authenticated events, replay checks, producer-scoped deduplication and a transactional SQLite outbox | Python / SQLite |
| Restore Drill | Authenticated SQLite snapshots and real restore rehearsals with integrity and business-invariant checks | Python / SQLite |
