C.W's Site

Network reconnaissance, vulnerability assessment, and exploitation with Nmap, Metasploit, and Burp Suite on Kali Linux.
Web app testing against the OWASP Top 10 (SQL injection, broken access control, XSS), with CVSS-rated findings and client-ready reports with verified fixes.
Traffic analysis in Wireshark, event investigation in Splunk, and log-based detections mapped to MITRE ATT&CK.
Custom tools and automation in Python, Java, and C++, tested with pytest.

Projects

2026

Python, pytest

A Python tool that scans a Linux server's login log (auth.log) and flags brute-force, password-spraying, and distributed login attacks.
Uses sliding time windows to tell real attacks apart from harmless typos, keeping false alarms low.
Tags each alert with its MITRE ATT&CK technique (T1110.001, T1110.003) and is covered by pytest tests for every attack type and edge case.

2026

Burp Suite, OWASP, CVSS

A full start-to-finish penetration test of a deliberately insecure employee portal, done the way a hired security tester would.
Found five vulnerabilities, including a login bypass (SQL injection), access to other employees' pay records (broken access control), and cross-site scripting.
Rated each finding with CVSS and the OWASP Top 10, and wrote a client-ready report with the business impact and a fix for each, re-tested to confirm it worked.

2026

Java, Fabric, Minecraft

A Minecraft mod that raises the item stack limit from 64 up to a configurable 1,000,000, while keeping tools and other durability items unstackable.
Includes an in-game settings slider and operator commands, and syncs the server's limit to every player who joins.
Built in my free time with Java and the Fabric modding framework.