// portfolio

Labs & projects

Hands-on security projects: each one comes with a write-up, the code and a downloadable bundle so you can rebuild it yourself.

Filter by tool · cisa-kev
.NETASP.NET CoreAWSActive DirectoryAnsibleAtomic Red TeamAzureAzure PolicyBloodHound CECIS BenchmarksCISA KEVCVSSCheckovCodeQLCycloneDXDebianDockerEPSSES|QLElasticsearchGitHub ActionsGreenboneIPsecKQLLocalStackMicrosoft 365Microsoft Entra IDMicrosoft GraphMicrosoft SentinelMinIOMoleculeOPNsenseOWASP ZAPOpenSCAPOpenSSLOpenVASOpenVPNPSScriptAnalyzerPesterPingCastlePostgreSQLPowerShellProwlerProxmoxPythonS3 Object LockSCAP Security GuideSQL ServerSemgrepSigmaSplunk SPLSuricataSysmonT-SQLTerraformTrivyUbuntuUnboundWazuhWindows LAPSZircoliteansible-lintauditdazureadazurermboto3cosigngitleakspgAuditpgcryptopySigmapytestpython-gvmsigma-clitflint
Vulnerability Assessment & Pentesting Intermediate

Vulnerability Management Workflow (Greenbone, EPSS, KEV)

Greenbone scans three outdated lab hosts with SSH credentials; findings are prioritized with CVSS, EPSS, CISA KEV and asset criticality under a written policy, tracked with SLA due dates, remediated and rescanned. Measured in CI against containers.

CISA KEVCVSSDebianDockerEPSS