API Testing Labs + Methodology - PortSwigger
·4126 words·20 mins
Complete API pentesting notes + working through PortSwigger labs
Projects
A collection of my cybersecurity projects, tools, and labs.
HackSmarter Web App Pentesting Capstone
·6504 words·31 mins
Comprehensive web application penetration test of the Hack Smarter e-commerce platform. 30 vulnerabilities identified — SQL injection, RCE, XSS, SSRF, CSRF, IDOR, and session management weaknesses — with a full attack chain from unauthenticated visitor to remote code execution.
PSObfuscate - Build, encode, wrap, and deliver PowerShell payloads
·886 words·5 mins
Building PSObfuscate: A PowerShell Payload Builder for Operators Who Value Their Time
When Antivirus Fails: Detecting C2 Activity with Wazuh and Security Onion
·1186 words·6 mins
In this project, I executed a custom, low profile mTLS C2 beacon on a fully patched Windows 11 endpoint that did not trigger Windows Defender. I then examined how this activity appeared across endpoint telemetry in Wazuh and network telemetry in Security Onion.
Assumed Breach SOC Lab: Internal RDP Brute Force, Active Directory Recon, and Wazuh Detection
·667 words·4 mins
In this project, I executed a custom, low profile mTLS C2 beacon on a fully patched Windows 11 endpoint that did not trigger Windows Defender. I then examined how this activity appeared across endpoint telemetry in Wazuh and network telemetry in Security Onion.