PROJECT
//
ARCHIVE

UNIVERSITY PROJECT

Honeypot analysis and security monitoring using the ELK stack.

▸Reviewed 2,000+ ModSecurity alerts and categorized by attack type (SQL injection, XSS, RCE). Identified top 3 patterns and used them to tighten WAF rules.

▸Correlated Filebeat severity data to surface critical system errors. Mean time to detection dropped by around 30%.

▸Deployed a Cowrie SSH honeypot capturing 500+ brute-force login attempts and SQLMap scans. Wired to Elasticsearch and Kibana for live threat dashboards.

UNIVERSITY PROJECT

Full-scope penetration test across VPN, DMZ, and internal network segments.

▸Identified 5 Critical, 4 High, and 4 Medium vulnerabilities. Exploited XML-RPC deserialization RCE, Elasticsearch MVEL script RCE, Pass-the-Hash, SNMPv1 misconfiguration, and RDP credential interception to reach SYSTEM-level access.

▸Performed lateral movement and subnet pivoting using Metasploit, Impacket, and credential harvesting. Demonstrated a full attack chain from initial access to domain persistence.

▸Delivered an audit report with CVSS scoring, CWE references, network topology maps, and a prioritized remediation roadmap.