security tools
welcome 2 the serious page
Hands-on cybersecurity work documented in one place.
This page collects my technical skills, Linux virtual machine lab work, VulnHub/CTF notes, cybersecurity research, and home server administration projects. The goal is to show practical, repeatable work instead of only listing tools on a resume.
01 skills
Technical skill set
A focused overview of the tools and concepts I am actively using in coursework, IT support, home lab practice, and independent cybersecurity projects.
systems + networking
development + data
02 linux vm home lab
Virtual lab environment
Isolated VM environment used to practice Linux administration, network configuration, scanning, enumeration, traffic analysis, defensive troubleshooting, and remediation documentation.
lab purpose
My home lab is built to safely test cybersecurity concepts in a controlled environment. It includes Linux and Windows virtual machines, vulnerable targets, and security tools used to analyze misconfigurations, review logs, understand attack paths, and practice hardening.
current focus areas
- Network discovery and enumeration with Nmap
- Packet capture and traffic analysis with Wireshark
- Linux command-line administration and hardening
- Basic vulnerability assessment and remediation notes
- Log review and incident response practice
03 ctf + vulnhub
VulnHub writeups
Hands-on walkthroughs of vulnerable machines — each card shows the target, tools used, skills demonstrated, and the remediation lessons learned.
writeup template
VulnHub Machine #1
Short summary of the target, objective, and main vulnerability path.
- Tools: Nmap, Gobuster, Burp Suite, Linux CLI
- Skills: enumeration, web testing, privilege escalation
- Takeaway: document the root cause and how it should be fixed
writeup template
VulnHub Machine #2
Add a concise explanation of the attack path, what was learned, and how the finding maps to real defensive work.
- Tools: Wireshark, Nmap, Hashcat, Python
- Skills: traffic review, password analysis, scripting
- Takeaway: explain the practical security lesson
writeup template
VulnHub Machine #3
Replace this placeholder with a completed lab summary once the walkthrough is published.
- Tools: Kali Linux, Metasploit, manual enumeration
- Skills: exploitation workflow, validation, remediation
- Takeaway: connect the lab to incident response or hardening
04 cybersecurity research
Research notes
Current-event summaries and vulnerability research notes — real incidents, real lessons.
current event
Washington Hotel Japan Ransomware
Summarizes the February 2026 ransomware attack on Washington Hotel Japan — breach impact, data-separation practices, incident response, and lessons in containment and customer data protection.
current event
Exploitation of Cisco SD-WAN
Summarizes the February 2026 ACSC advisory on active exploitation of Cisco SD-WAN appliances — authentication bypass, rogue peer insertion, root persistence, and lessons in patch tracking and trusted infrastructure.
current event
Polish Energy Infrastructure Attacks
Summarizes the December 2025 cyberattacks on Polish energy facilities — destructive malware, FSB vs. Sandworm attribution debate, and lessons in OT security and critical infrastructure defense.
current event
Fortinet FortiClient EMS Zero-Day
Summarizes the April 2026 active exploitation of CVE-2026-35616 — unauthenticated RCE, nearly 2,000 exposed instances, CISA KEV listing, emergency hotfix, and lessons in patch management and exposure reduction.
current event
Nation-State Cyberattacks Against the UK
Summarizes the April 2026 AP report on NCSC warnings — Russia, Iran, and China targeting UK infrastructure, four nationally significant incidents per week, AI as an offensive tool, and lessons in critical infrastructure defense.
05 home server
Home server administration
Practical systems administration — service hosting, backups, user permissions, monitoring, patching, access control, and secure configuration.
core services
- Shared file storage and organized permissions
- Remote access configured with limited exposure
- Backup planning and routine maintenance
- Service monitoring and uptime checks
security practices
- Regular OS and software updates
- Strong credentials and account reviews
- Minimal exposed services
- Network segmentation and log checks
06 proof of work
What this page documents
01
I can build and maintain technical environments, not just talk about cybersecurity concepts.
02
I can document findings, explain risk, and connect technical issues to remediation steps.
03
I can use common security tools in a controlled and ethical lab environment.
04
I can combine IT support, systems administration, networking, and security fundamentals.