SentryNet — Modular Authorized Security Testing Framework
Interactive Bash controller orchestrating web, network, Windows, social-engineering, and IoT assessment modules
- Designed a menu-driven controller architecture where every module is independently executable and callable from a central entry point, sharing a common helper library for consistency.
- Built in target validation, an explicit "type yes" authorization gate before any active test, automatic dependency checks with install hints, timestamped logging, and timeout wrapping as defaults across every module — not bolted on afterward.
- Labeled every module by risk tier (safe/passive, controlled/active, disruptive/lab-only) and gated the disruptive tier (DoS load demo, ARP/MITM demo) behind extra confirmation, documenting scope and safe-use boundaries in the README.
- Implemented a linear Windows attack chain (recon → RDP brute-force via Hydra → Metasploit reverse shell → Mimikatz credential-dumping guidance) tested against an isolated VMware host-only lab.
Cybersecurity Home Lab — Isolated Attack/Defense Environment
Self-built Kali Linux + Windows 10 lab for hands-on offensive and defensive practice
- Built an isolated host-only network (bare-metal Kali Linux host + Windows 10 VM via VMware) to safely practice attack and defense techniques without exposing production systems.
- Deployed OWASP Juice Shop and DVWA in Docker containers and tested SQL injection, command injection, and XSS against them.
- Weakened and then enumerated a Windows 10 target — SMB share, local account, and WinRM access — using enum4linux for authenticated enumeration and evil-winrm to obtain a remote shell, capturing the full session as a script transcript and packet capture.
- Ran a WPA2 handshake capture end-to-end with the aircrack-ng suite, including the deauthentication phase.
Tech: Kali Linux, VMware, Docker, Nmap, enum4linux, evil-winrm, Aircrack-ng, Wireshark, tcpdump
Vulnerability Monitor — Python Port Scanner & CVE Lookup Tool
Automated scanning and CVE cross-referencing tool built from scratch
- Engineered an Nmap-based port scanner paired with an independent raw-socket banner grabber, so service fingerprints are cross-checked by two separate methods rather than trusted from a single source.
- Integrated the NVD API v2 to automatically cross-reference detected service versions against published CVEs with CVSS scoring, and documented the tool's fuzzy-matching limitations directly in its README.
- Shipped a CLI with colorized output, tabulated results, and JSON export for reporting.
log-analyzer — Auth Log Threat-Scoring CLI
Published, pinned GitHub project for detecting suspicious authentication activity
- Built a regex-based parser for authentication logs that aggregates activity by source IP and assigns a threat score to flag suspicious behavior.
- Extended the same log-parsing core into a DoS detector using sliding-window threshold analysis over web server and auth logs.
- Shipped as a documented, tagged, argparse-driven CLI with CSV/JSON export, type hints, and docstrings throughout.