Case studies & security projects
Open-source security tools and sample engagement write-ups. Real projects are linked to their GitHub repositories; sample case studies are clearly marked and illustrate the reporting format used on real engagements.
Open-source security projects
Password Generator & Strength Checker
Generates cryptographically sound passwords and evaluates entropy, pattern weaknesses, and dictionary vulnerability. Built to demonstrate real-world auth failure modes and mitigation.
Recon Automation Engine
Advanced reconnaissance automation pipeline for web application security testing. Aggregates subdomains, discovers endpoints, analyzes JavaScript for secrets, and detects vulnerabilities such as IDOR, exposed cloud assets, and GraphQL misconfigurations.
DDoS Simulation Tool
Educational DDoS simulation tool for controlled lab environments. Designed to help security teams understand traffic flood mechanics, rate-limiting gaps, and infrastructure resilience thresholds.
Steganography Tool
Python-based steganography tool for embedding and extracting hidden data within image files using LSB encoding. Demonstrates covert data-exfiltration techniques and detection strategies.
Sample engagement case studies
These illustrate the structure and depth of a real engagement report. They are placeholders pending permission to publish anonymized findings from paid engagements — replace with real, disclosure-approved write-ups as they become available.
IDOR in a Multi-Tenant SaaS API
How a predictable object ID in a REST endpoint allowed cross-tenant data access, and the fix that closed the gap.
Read the write-up →Authentication Bypass via Password Reset Flow
A logic flaw in a password reset token that allowed account takeover without user interaction.
Read the write-up →Recon Automation Uncovering Shadow Infrastructure
Using AI-assisted recon to surface an exposed staging subdomain running an outdated admin panel.
Read the write-up →