WORK

A modular enumeration and validation tool for external pentests. Subdomain discovery, fingerprinting, asset classification, and automated reporting for ingestion into other tools and platforms.

A Proxmox-based environment with a Windows domain, attacker infrastructure, and logging stack, used to rehearse full attack chains and experiment with detection logic and lab scenarios.

Custom antenna design, tuning workflow, and signal-capture methodology for badge cloning and physical red team engagements, with notes on range testing and practical constraints.

Notes and experiments from building and running phishing and social engineering campaigns, focusing on psychological principles, lures, pretext development, and how organizations actually respond.

De-identified recreations of interesting findings from past tests, rebuilt in a lab environment. Includes vulnerable code examples, exploitation steps, and remediation notes.

Exploration of common IAM misconfigurations, enumeration techniques, and escalation paths in cloud environments, with lab scenarios and practical guidance for both attackers and defenders.

Experiments and study notes from learning COBOL and exploring how legacy systems behave, with an eye toward security implications and long-lived infrastructure.

Selected film shots and notes from travel, homelab building, and red team life on the road, part of the joy of observation and documentation.