Rust-based Remote Agent Framework (Research)
ProxmoxImpacketActive DirectoryBloodHoundRustTokio
- Built a custom remote agent framework in Rust to study secure, memory-safe native tooling.
- Implemented asynchronous agent/server communication with Tokio for scalability.
- Applied Rust’s safety features to mitigate common memory-related vulnerabilities.
Home Lab & Professional Penetration Testing Engagements
ProxmoxImpacketADBloodHoundSliverBurp Suite
- Established a virtualized Active Directory lab to execute advanced attacks and utilized C2 frameworks post-exploitation.
- Conducted vulnerability assessments on web applications, identifying critical flaws such as SQL injection and XSS.
- Authored multiple professional penetration testing reports detailing findings, risk, and remediation.
Active DirectoryLinuxWeb ExploitationPrivilege EscalationReport Writing
- Engineered custom detection rules and decoders for Wazuh SIEM to identify advanced threats.
- Integrated CTI feeds to enrich security alerts and enable proactive threat hunting.
- Improved alert fidelity by correlating internal events with external threat intelligence.