● Labs
Where I test, break and harden things safely.
Domain design with tiered administration, Group Policy baselines, SMB/LDAP signing, and attack-path practice such as privilege escalation.
A Raspberry Pi web server (Apache, PHP, MariaDB) with custom virtual hosts for safe testing, plus Burp Suite work on the OWASP Top 10.
A packet-capture lab series: analysing an IoT VLAN capture to find a rogue device and an undocumented subnet, plus Nmap enumeration.
Ubuntu with nginx behind Cloudflare, SSH hardening, and firewall rules. This website runs on it.
Wazuh manager and dashboard on a cloud VM with Linux and Windows agents, and detections for external SSH, privileged group changes and log tampering.