Hands‑on cybersecurity work documented in one place
This page collects my technical skills, Linux virtual machine lab work, VulnHub/CTF notes, cybersecurity research and home server administration projects. The goal is to show practical, repeatable work instead of only listing tools on a resume.
Use the navigation buttons above or the quick links on the right to jump between sections. Everything on this page comes from the original projects.html file—nothing has been removed or invented.
01 / skills
A focused overview of the tools and concepts I am actively using in coursework, IT support, home lab practice, and independent cybersecurity projects.
Security Tools
- Nmap
- Wireshark
- Burp Suite
- Snort
- Splunk
- Hashcat
- Metasploit
Systems + Networking
- Linux
- Kali Linux
- Windows Administration
- pfSense
- VirtualBox / VMware
- TCP/IP
- OSI Model
Development + Data
- Python
- HTML/CSS
- PHP
- SQL
- GitHub
- PowerShell
- Terminal
02 / linux vm home lab
Isolated VM environment used to practice Linux administration, network configuration, scanning, enumeration, traffic analysis, defensive troubleshooting and remediation documentation.
Lab purpose
My home lab is built to safely test cybersecurity concepts in a controlled environment. It includes Linux and Windows virtual machines, vulnerable targets and security tools used to analyse misconfigurations, review logs, understand attack paths and practice hardening.
Current focus areas
- Network discovery and enumeration with Nmap
- Packet capture and traffic analysis with Wireshark
- Linux command‑line administration and hardening
- Basic vulnerability assessment and remediation notes
- Log review and incident response practice
Environment
- Host
- Personal workstation
- Virtualisation
- VirtualBox / VMware
- Attacker VM
- Kali Linux
- Targets
- Linux, Windows, VulnHub machines
- Network
- Isolated lab segment
03 / ctf + vulnhub
Use this section for short, professional writeups. Each card shows the target, tools used, skills demonstrated and the remediation lessons learned.
writeup template
VulnHub Machine #1
Short summary of the target, objective and main vulnerability path. Keep spoilers behind the full writeup link if preferred.
- Tools: Nmap, Gobuster, Burp Suite, Linux CLI
- Skills: enumeration, web testing, privilege escalation
- Takeaway: document the root cause and how it should be fixed
writeup template
VulnHub Machine #2
Add a concise explanation of the attack path, what was learned and how the finding maps to real defensive work.
- Tools: Wireshark, Nmap, Hashcat, Python
- Skills: traffic review, password analysis, scripting
- Takeaway: explain the practical security lesson
writeup template
VulnHub Machine #3
Replace this placeholder with a completed lab summary once the walkthrough is cleaned up and published.
- Tools: Kali Linux, Metasploit, manual enumeration
- Skills: exploitation workflow, validation, remediation
- Takeaway: connect the lab to incident response or hardening
04 / cybersecurity research
A place for current‑event summaries and vulnerability research notes.
Current Event
Writeup – Washington Hotel Japan Ransomware
This document summarizes the February 2026 ransomware attack on Washington Hotel Japan, explaining how the breach affected business systems while highlighting the company’s response efforts and data‑separation practices. It also connects the incident to broader cybersecurity trends in Japan and reflects on key lessons in incident response, containment and protecting customer information.
View noteCurrent Event
Writeup – Exploitation of Cisco SD‑WAN
This document summarizes the February 2026 ACSC advisory on active exploitation of Cisco SD‑WAN appliances, explaining how attackers used authentication bypass vulnerabilities to gain access, add rogue peers and achieve root‑level persistence. It also highlights why SD‑WAN compromise is especially serious for organisations, connects the incident to broader network security and CVE response concerns and reflects on key lessons in patching, remediation, advisory tracking and protecting trusted infrastructure.
View noteCurrent Event
Writeup – Polish Energy Infrastructure Attacks
This document summarizes the December 2025 cyberattacks on Polish energy infrastructure, explaining how Russian‑linked threat actors targeted power and heat facilities with destructive malware during a period of extreme cold. It also examines the attribution debate between Russia’s FSB and Sandworm, connects the incident to broader Russia–Poland cyber escalation after the invasion of Ukraine and reflects on key lessons in OT security, critical infrastructure defence, attribution and destructive cyber threat response.
View noteCurrent Event
Writeup – Fortinet Zero‑Day Exploitation
This document summarizes the April 2026 active exploitation of Fortinet’s FortiClient EMS zero‑day vulnerability, CVE‑2026‑35616, explaining how unauthenticated remote code execution created major risk for organisations using exposed endpoint management systems. It also highlights Fortinet’s emergency hotfix response, the vulnerability’s addition to CISA’s Known Exploited Vulnerabilities catalogue and key lessons in patch management, internet exposure reduction, management server security and defending against fast‑moving zero‑day exploitation.
View noteCurrent Event
Writeup – Cyberattacks Against the UK
This document summarizes the April 2026 Associated Press article on nation‑state cyberattacks against the United Kingdom, explaining how hostile governments such as Russia, Iran and China are increasingly using cyber operations to target national security, infrastructure and business systems. It also connects the rise in nationally significant cyber incidents to broader trends in international conflict, critical infrastructure protection, artificial intelligence and the growing need for stronger cybersecurity preparation.
View note05 / home server
This section shows practical systems administration: service hosting, backups, user permissions, monitoring, patching, access control and secure configuration.
Core services
- Shared file storage and organised permissions
- Remote access configured with limited exposure
- Backup planning and routine maintenance
- Service monitoring and uptime checks
Security practices
- Regular OS and software updates
- Strong credentials and account reviews
- Minimal exposed services
- Network segmentation and log checks