Cyber Security: Penetration Testing, Security Engineering, Machine Learning and Python Projects
Projects like Cryptography, Pentesting, CTFs, Ethical Hacking, Security Engineering and more.
DPTSI Penetration Testing
Security Tested 20 Web Applications. Found hundreds of small-medium and several high-critical level vulnerabilities such as Database Leak (SQLi) and Gained Admin Access (Broken Access Control).
Statistical, Frequent Pattern Mining and Machine Learning based Web Honeypot Attack Data Analysis: SNARE and Tanner
Attack Data Analysis of Web Honeypot written in Python with VPS Setup and Attack Simulations + real attack data with VPS
OS Security (SIEM): Wazuh
Here I'm using Wazuh as SIEM to detect and analyze what’s happening when Windows OS is infected with running malwares, also when a Web App is attacked.
Network & Web Attacks with Detection using Snort IDS Community and Custom Rules
Here, what I did is I use Snort as Intrusion Detection System (IDS) to detect any incoming attacks against certain websites, use community rules and create custom rules to detect intrusions. On top of that, I also do Proof of Concepts to see whether the rules work or not.
SSH and Web Honeypots using Cowrie and SNARE + TANNER
In this project I’m setting up honeypots which is an SSH honeypot (cowrie) and a web honeypot (snare + tanner) where I analyze malicious activities from users from the internet. I setup the honeypots on AWS C2 Ubuntu instances.
Web Security Static Analysis using Semgrep and SonarQube
Here, I did Web Security static code analysis using Semgrep and SonarQube. The websites that I analyzed here are DVWA which is a vulnerable Fullstack Web App and Kos KaKa Dashboard Backend which is a backend API which is a Backend API for Kos KaKa web app.
Web App Security Dynamic Analysis: OWASP ZAP-CLI
Here, I did Web Security dynamic analysis using ZAP-CLI. The website that I analyzed here is OWASP Juice Shop which is a vulnerable Fullstack Web App.
Malware Analysis Projects
Here I showcase some malwares that I get from malicious whatsapp messages and the internet then analyze them using both Static and Dynamic Malware Analysis methods.
Custom Security Tools
Custom security tools mainly built using Python