C.W Personal Site

Projects

SSH Attack Detector

GitHub

2026

Python, pytest

Try the live demo →

  • A Python tool that scans a Linux server's login log (auth.log) and flags brute-force, password-spraying, and distributed login attacks.
  • Uses sliding time windows to tell real attacks apart from harmless typos, keeping false alarms low.
  • Tags each alert with its MITRE ATT&CK technique (T1110.001, T1110.003) and is covered by pytest tests for every attack type and edge case.

Web App Penetration Test

GitHub

2026

Burp Suite, OWASP, CVSS

Read the report →

  • A full start-to-finish penetration test of a deliberately insecure employee portal, done the way a hired security tester would.
  • Found five vulnerabilities, including a login bypass (SQL injection), access to other employees' pay records (broken access control), and cross-site scripting.
  • Rated each finding with CVSS and the OWASP Top 10, and wrote a client-ready report with the business impact and a fix for each, re-tested to confirm it worked.