repository

Thirty-three projects on GitHub — cybersecurity work first (penetration testing, intrusion detection, incident response & risk management), followed by other technical work. Click a category to filter.

filter:
01 penetration testing

Cloud Security Exploitation

An exploration of cloud infrastructure security vulnerabilities and misconfigurations. The project examines risks including exposed storage buckets, overly permissive IAM policies, and insecure API configurations across AWS, Azure, and Google Cloud.

view on github →
02 penetration testing

Simple Payload Exploitation

A technical demonstration of payload creation and exploitation techniques using Python. Covers payload encoding, obfuscation, delivery mechanisms, and exploitation frameworks demonstrating code execution and system compromise mechanics.

view on github →
03 penetration testing

Recon Automation Using Beautiful Soup

A web scraping project utilizing Python's BeautifulSoup library for automated data extraction. Demonstrates programmatic parsing of HTML and XML for reconnaissance, OSINT gathering, and automated intelligence collection during security assessments.

view on github →
04 penetration testing

Active Information Gathering

An exploration of active reconnaissance techniques used to enumerate live targets and network infrastructure. Demonstrates port scanning, service enumeration, banner grabbing, and network mapping involving direct target system interaction.

view on github →
05 penetration testing

Static Code Analysis

An examination of source code security through static analysis techniques. Demonstrates identifying vulnerabilities and security weaknesses by analyzing code without execution, covering automated scanning tools and manual review methodologies.

view on github →
06 penetration testing

Open-Source Intelligence

A comprehensive phishing campaign simulation demonstrating social engineering attack vectors and reconnaissance techniques. Documents the complete phishing lifecycle from OSINT gathering through whaling attacks, including landing page creation and credential harvesting.

view on github →
07 penetration testing

Client-Side Exploitation

An investigation into attack vectors that target end-user systems through client-side vulnerabilities. Explores browser weaknesses, malicious documents, drive-by downloads, and social engineering techniques with evasion methods for security control bypass.

view on github →
08 penetration testing

Web Application Exploitation

A practical examination of web application vulnerabilities and exploitation techniques. Demonstrates identifying and exploiting injection attacks, broken authentication, insecure object references, and cross-site scripting flaws.

view on github →
09 intrusion detection

Investigating Web Application Attacks

An analysis of common web application attack vectors and exploitation techniques. Examines SQL injection, cross-site scripting, and authentication bypass vulnerabilities with detection methods and response strategies.

view on github →
10 intrusion detection

Investigating Network Attacks

A comprehensive investigation into network-layer security incidents and attack methodologies. Covers reconnaissance, protocol exploitation, lateral movement, packet analysis, intrusion detection patterns, and forensic techniques.

view on github →
11 intrusion detection

Network Vulnerability Discovery

A systematic approach to identifying security weaknesses in network infrastructure. Showcases vulnerability scanning, network mapping, and security assessment methodologies with remediation recommendations and risk prioritization.

view on github →
12 intrusion detection

Investigating Compromised Endpoints

Analysis of Windows Event Logs to detect suspicious activity including log clearing, privilege escalation, and Kerberos authentication anomalies.

view on github →
13 intrusion detection

Malware Investigation

A deep dive into malware analysis and reverse engineering techniques. Documents examining malicious software behavior, capabilities, and indicators of compromise using static and dynamic analysis methods.

view on github →
14 intrusion detection

Investigating Endpoint Vulnerability

An examination of endpoint security weaknesses and compromise indicators on individual systems. Demonstrates vulnerability assessment, misconfigurations, exploitation indicators, host-based analysis, and endpoint hardening practices.

view on github →
15 intrusion detection

Cloud Security Monitoring

An exploration of security monitoring strategies for cloud environments. Addresses detecting threats including misconfigurations, unauthorized access, and data exfiltration with logging and alerting strategies for major cloud platforms.

view on github →
16 intrusion detection

User Security Monitoring

A study of user behavior analytics and insider threat detection. Focuses on monitoring activities to identify anomalous behavior, credential abuse, and potential violations with baseline establishment and privacy-conscious approaches.

view on github →
17 intrusion detection

Raccoon Stealer

An analysis of the Raccoon Stealer malware family. Examines this information-stealing trojan's infection chain, credential harvesting capabilities, evasion techniques, threat intelligence, and defensive countermeasures.

view on github →
18 incident response risk management

Deconstructing a Cybersecurity Event

A methodical breakdown of a complete security incident from initial compromise to resolution. Walks through incident lifecycle phases including detection, analysis, containment, eradication, and recovery with evidence piecing and timeline establishment.

view on github →
19 incident response risk management

SAP

A security assessment of SAP enterprise systems and their unique vulnerabilities. Explores authorization flaws, transport management weaknesses, custom code vulnerabilities, SAP-specific attack techniques, and configuration best practices.

view on github →
20 incident response risk management

Device Forensics

A hands-on investigation into digital forensics techniques for various computing devices. Demonstrates evidence acquisition, preservation, and analysis with file system analysis, artifact recovery, timeline reconstruction, and chain of custody maintenance.

view on github →
21 web development

Learning React

A React learning project — components, hooks, props, and state management.

view on github →
22 web development

Learning JavaScript

JavaScript practice and exercises covering core language fundamentals.

view on github →
23 other languages

Relearning SQL

Learning SQL using Codédex.

view on github →
24 web development

The Origins of JavaScript

Notes, references, and activities to learn JavaScript.

view on github →
25 web development

The Origins of CSS

Activities and references used while I learned about CSS.

view on github →
26 python

Python Exercises

Practicing Python.

view on github →
27 web development

The Origins of HTML

All my notes, resources, and the activities I made to learn HTML from Codédex.

view on github →
28 python

Intermediate Python

All the resources I used and made to learn Python from Codédex.

view on github →
29 python

Bella the Gif

Python GIF project for The Legend of Python by Codédex — featuring Bella, my cat.

view on github →
30 python

The Legend of Python

All the resources I used and made to learn Python from Codédex.

view on github →
31 web development

Benny's Bao

Project for The Origins of HTML I from Codédex.

view on github →
32 web development

Hackathon Stoop Sale

Codédex Summer Hackathon 2024 project.

view on github →
33 other languages

C++ Review

Reviewing C++.

view on github →