Projects
Offensive security and technical projects
Case studies covering Windows payload development and process injection, routed network pivoting, web application exploitation, Active Directory attack paths, cyber-range design, and the defensive engineering that followed. Public lab commands and relevant code are retained where they explain the work.
Retiring the WordPress VPS I Built to Learn
A retrospective on the Docker-based WordPress platform I began building at university in 2021: how its security architecture evolved through experimentation, what failed in practice and what several years of operating it taught me.
- Docker
- Docker Compose
- Caddy
- WordPress
King of the Forest: Competitive Cyber Security Range
Honours project combining a Proxmox-based competitive cyber range with isolated team networks, intentionally vulnerable Linux and Active Directory hosts, and a custom scoring service.
- Proxmox VE
- OPNsense
- TrueNAS
- VXLAN
Authorised Payload Research Lab
Python and C++ framework for generating AES-encrypted Meterpreter payloads, resolving Windows APIs dynamically, and comparing self-injection with remote process injection under Defender.
- Python
- C++
- Windows API
- AES
Internal Network Security Evaluation
Mapped and compromised an undocumented multi-subnet lab by combining route-led discovery, nested SSH pivoting, NFS and credential abuse, firewall analysis, and chained attack paths.
- Kali Linux
- Nmap
- SSH
- NFS
AWSCam: Raspberry Pi-to-AWS IoT Camera
Raspberry Pi camera system connecting a custom Linux GPIO driver and Python capture service to MQTT, API Gateway, Lambda, S3, and a browser interface.
- Raspberry Pi
- C
- Linux Kernel Module
- Python
CyberPlatter Android Recipe Manager
Historical CMP309 Android coursework demonstrating Firebase-backed sign-in and a local SQLite create, search, view, update, and delete workflow.
- Android
- Java
- SQLite
- Firebase Authentication
Web Application Security Assessment
OWASP-guided assessment demonstrating SQL injection, reflected and stored XSS, session exposure, executable file upload, server-side execution, and repeated unsafe patterns in PHP source.
- OWASP WSTG
- Burp Suite
- OWASP ZAP
- PHP
Kubernetes and Elastic Observability Lab
Historical team project integrating a four-node K3s cluster, Rancher-managed workloads and a separate Elastic host across six Ubuntu virtual machines.
- Ubuntu Server
- K3s
- Kubernetes
- Docker
Network Pivoting and Segmentation Lab
Controlled offensive-security project comparing port forwarding, SOCKS proxying, and routed tunnelling across a segmented VMware lab with pfSense, Ubuntu, Windows, and Active Directory.
- VMware Workstation
- pfSense
- Ubuntu
- Windows Server