security-assessment

Sanitized summary of an hands-on hacking lab

Educational cybersecurity platform for learning ethical hacking and penetration testing through real-world security tools, interactive dashboards, and automated vulnerability scanning.

Interactive Ethical Hacking and Cybersecurity Assessment Platform — ITA1406

Read-only, pre-implementation inventory for Microsoft Entra ID and Conditional Access. Can this tenant take the planned CA rollout? It measures, and says so when it can't.

Greenbone/OpenVAS vulnerability scanning of a legacy lab target, with a documented risk-override process.

Cosca (Combo Scanner) is an Application Security automation tool that invokes third-party scanners and processes outputs in a one-liner command.

🛡️ Interactive OWASP Top 10 security assessment web app & downloadable audit report for startup web application attack surfaces.

Recruiter-facing ethical hacking and attack surface validation lab demonstrating authorization-first assessment, synthetic findings, attack-path analysis, remediation, retesting, and security framework mapping.

Read-only Entra ID / Microsoft 365 tenant assessment, documentation and drift detection in PowerShell — versionable snapshots, 51 best-practice rules with a CIS benchmark view, and a self-contained offline HTML report.

Bash-based automated vulnerability scanner for authorized lab and internal network assessments.

A Flask-based website security assessment tool that analyzes security headers, calculates security scores, and provides vulnerability findings with remediation recommendations.

Open-source PowerShell toolkit for Microsoft 365 tenant assessment, security review, inventory, and reporting.

Authentication security assessment focused on SSH and FTP services using Hydra, credential testing, custom wordlists, FTP enumeration, authentication validation, and log analysis within a controlled cybersecurity laboratory.

Security assessment workspace with Next.js, FastAPI, scoped scans, evidence review and persistent PDF reports.

Public support, feature requests, rule ideas, and Maester integration for TestimoX.

Four educational security case studies: network defence, application assessment, system hardening, and data protection.

A deterministic verifier for assessing the security of deployed network segmentation architectures against their intended design.

AD-Descript0r is a Python tool for Active Directory reconnaissance. It authenticates against a Domain Controller, retrieves all usernames and their descriptions, and displays the results in a clean table with colored output

PAT Token Checker - A PowerShell script that analyses Azure DevOps Personal Access Token (PAT) to find its permissions, accessible resources, and security risks across projects, repos, pipelines, and secrets.

A secure multi-cloud medical application platform for a Japanese organization, built across AWS and GCP using Terraform, Transit Gateway, HA VPN, BGP, CloudFront, WAF, private Japan-hosted RDS connectivity, observability, and a full pentesting evidence pack.