Malware analysis

April 2026

SystemBC malware analysis

Analyzed a SystemBC sample across static tools, controlled execution, disassembly, and live debugging. The investigation traced persistence-related code, scheduled-task artifacts, and randomly named executables written beneath ProgramData.

  • IDA
  • x32dbg
  • Process Monitor
  • Malware analysis
Explore more →

Exploit development

Dec 2025

Stack-based buffer overflow to RCE

Analyzed an unsafe string copy in a 32-bit Windows server, established control of EIP, identified a reliable control-flow redirection instruction, and constructed a Python payload that demonstrated remote code execution in an isolated lab.

  • x32dbg
  • Python
  • x86 stack analysis
  • Exploit mitigations
Explore more →

Secure data structures

Sep 2025 - Dec 2025

File metadata ledger CLI

Built a C command parser that records valid operations in an in-memory linked ledger, chains each entry to the preceding hash, detects simulated tampering, loads its hashing functions from a Windows DLL, and serves the interface over TCP.

  • C
  • Linked lists
  • Hash chaining
  • Winsock
Explore more →

Infrastructure and automation

Sep 2025 - Dec 2025

Windows domain services & automation

Built and administered a small Windows/Linux enterprise environment across a connected six-lab series. The work covered Active Directory, DNS, DHCP, Group Policy, PowerShell and Bash automation, Linux storage, file services, web hosting, and centralized logging.

  • Active Directory
  • PowerShell
  • Windows Server
  • Rocky Linux
Explore more →

Python systems scripting

Sep 2025 - Nov 2025

Systems & security scripting

Built four Linux-focused Python utilities for network diagnostics, system inventory, symbolic-link management, and failed-login analysis. Each script turns a recurring administration or security task into a repeatable command-line tool.

  • Python
  • Linux
  • Network diagnostics
  • Log analysis
Explore more →

Vulnerability assessment

Oct 2024 - Dec 2024

Brick Wall Cyber

Assessed a simulated managed security provider from its asset inventory and network diagram. The work covered STRIDE threat modeling, CVSS interpretation, business-risk analysis, vulnerability research, and remediation prioritization.

  • STRIDE
  • CVSS
  • NIST NVD
  • Risk assessment
Explore more →