Initial Access Intelligence

Enterprise network penetration testing and hardening - exploitation of vsftpd backdoor, PHP CGI injection, and DNS amplification with full remediation.

CLI rewrite of the Drupalgeddon2 (CVE-2018-7600) PoC — for authorised testing/education

Python

A security-first SOC lab environment featuring a multi-node virtual network, Wazuh SIEM orchestration, automated Active Response (IPS), and proactive vulnerability management.

A Spring Boot REST API backend for managing residential societies with JWT-based role authentication, 15+ modules, and context-aware access control.

Java

GLPI cve-2023-36808

Python

None

Shell

None

Python

Full network/system penetration test of Metasploitable 2 — recon → root compromise (Samba RCE, ingreslock, MySQL/PostgreSQL default creds) → post-exploitation, with reports, per-finding write-ups, ATT&CK mapping, and blue-team Sigma detection rules.

detection-engineering ethical-hacking metasploit metasploitable2 mitre-attack network-security penetration-testing privilege-escalation sigma-rules vapt

None

None

Python