Focused on web application and API security — authentication flaws, access control bugs, and business logic vulnerabilities. Building practical skills through labs, CTFs, and real-world projects. Burp Suite in one hand, coffee in the other.
Hybrid WAF pairing ModSecurity rules with a fine-tuned DistilBERT model, achieving 94.2% detection accuracy and 0.928 F1 on a custom HTTP traffic dataset. Deployed as a 4-container Docker Compose stack with a real-time React monitoring dashboard processing traffic through a two-layer defense (rule-based + ML), logging every decision, and visualizing attack patterns with 1-second refresh intervals.
Multi-tier web security lab using a reverse proxy WAF protecting a vulnerable backend. Configured HTTPS with self-signed TLS certs and routed 100% of traffic through the WAF layer inside an isolated VMware virtual network.
Whether you want to talk security, collaborate on a project, or just nerd out about CTFs — my inbox is open.
Guest access granted. Use standard bash commands to navigate.
Welcome to Ubuntu 22.04.4 LTS (GNU/Linux 5.15.0-101-generic x86_64) * Documentation: https://help.ubuntu.com * Management: https://landscape.canonical.com * Support: https://ubuntu.com/advantage