Security workbuilt through practice.

AI Security

A collection of local educational labs designed to explore how modern AI applications can fail under adversarial input and unsafe trust assumptions.

• Python
• Ollama
• Streamlit
• FastAPI / Flask
• Docker
• ChromaDB
• LangChain
• SQLite

Purple Team / Detection

An isolated enterprise-style security lab combining vulnerability validation, attack-path analysis, detection engineering, risk scoring and remediation verification.

• Docker
• Docker Compose
• FastAPI
• PostgreSQL
• Python
• Nmap
• OWASP ZAP
• MITRE ATT&CK

Vulnerability Management

A reporting workflow for turning scanner and manual-assessment evidence into normalized findings, remediation guidance and structured security reports.

• Python
• Nmap XML
• OWASP ZAP
• JSON
• YAML
• SQLite
• Docker
• Git

OT & IoT Security

A software-only monitoring lab for understanding industrial and IoT network traffic, protocol behavior and lightweight anomaly detection.

• Node-RED
• Modbus TCP
• Python
• tcpdump
• TShark
• Wireshark
• Docker

DevSecOps / Cloud

Hands-on CI/CD and container-security work focused on understanding insecure pipelines, Docker configuration, secret exposure and remediation controls.

• Docker
• Docker Compose
• GitHub Actions
• Trivy
• Gitleaks
• Semgrep
• Git
• Python

Application Security

A custom application-security rules project combining vulnerable demo behavior, structured rules, control cases and machine-readable evidence.

• Python
• Flask
• JSON
• Automated tests
• Security rules
• Git

Reverse Engineering / AppSec

A Java application-analysis exercise focused on tracing authentication and authorization behavior through compiled application logic and runtime validation.

• Java
• Spring
• JAR analysis
• HTTP
• Authentication flows
• Authorization testing

Web Penetration Testing

An isolated web-security assessment lab that takes interns through application mapping, manual validation, evidence collection, remediation and retesting.

• Docker
• OWASP Juice Shop
• Burp Suite
• curl
• Postman / Bruno
• Nmap
• Python
• Git