Personal Projects

Things I've built, experimented with, or documented well

Infrastructure & Home Lab

PNETLab on GCP (Terraform-Based Deployment)

Cloud-hosted private network lab built using Terraform. Used for learning routing, switching, VPNs, and network design
  • PNETLab deployment on Google Cloud
  • Infrastructure-as-Code with Terraform
  • Secure lab access via Tailscale with custom domain without public exposure
View Documentation

Virtual Lab for Offensive Security

A virtual home lab designed for practicing penetration testing, Active Directory attacks, and network-based scenarios.
  • Built using virtualization and isolated networking.
  • Designed to simulate small enterprise environments.
  • Used for CTF practice, tooling experiments, and attack chain testing.
View Documentation

Mirroring GitHub Pages with Cloudflare Workers

Using Cloudflare Workers as reverse proxy to mirror my GitHub Pages site on a custom domain without breaking SEO
  • Cloudflare Workers as reverse proxy
  • No duplicate deployments or hosting migration
  • Fully serverless and free-tier friendly
View Documentation

Temporary Samba Server on Azure VM

This project documents a temporary requirement to provide remote file access using a Samba (SMB) server deployed on an Azure Virtual Machine.
  • Azure VM deployment
  • Manual Samba (SMB) configuration
  • IP-based access restriction
View Documentation

Development

Blog - This Website

A personal blog built with Hugo and a heavily customized base theme. The blog itself is an ongoing project.
  • SPA-like navigation using with Swup.js on top of Hugo
  • Theme customized to match my preferred layout and workflow
  • Minimalist design, focus on simplicity
View Documentation

Gscan

A simple TCP port scanner written in Go, built to understand concurrency and goroutine.
  • Concurrent TCP port scanning in Go
  • Built for learning and experimentation
  • Inspired by Nmap’s scanning approach
View Code

Security

TryHackMe Wreath - Pentest Case Study

A penetration testing report based on the TryHackMe Wreath environment.
  • A penetration testing report based on the TryHackMe Wreath environment.
  • Includes attack chain, findings, and remediation notes
  • Written in a report-style format
View Report

PHP 8.1.0-dev Remote Code Execution

A proof-of-concept (PoC) exploit targeting the zerodium backdoor in PHP 8.1.0-dev via crafted HTTP headers.
  • Understanding exploitation flow
  • Written for learning and documentation purposes
  • Not intended for real-world misuse
View PoC

Active Directory Attack Wrapper Scripts

A collection of helper scripts for playing CTFs with Active Directory environment.
  • Wraps existing tools to reduce repetitive steps
  • Written for learning and documentation purposes
  • Actively evolved during CTF practice
View Scripts