Home Lab: SOC-in-a-Box
GitHub ↗A self-hosted security operations lab built to practice detection and response: pfSense segmented the network, Wazuh/ELK collected telemetry, and Kali/Parrot acted as the red team side.
- Configured ingest pipelines for Windows Sysmon and Linux auditd logs
- Wrote custom Suricata rules that alerted on Kerberoasting traffic
- Practiced IR: triaged alerts, contained a simulated beacon, wrote the report
Recon Automator
GitHub ↗A Python CLI that wraps subdomain enumeration, port scanning, and HTTP fingerprinting into one pipeline and writes a tidy report — my standard starting point for CTF machines and authorized assessments.
- Async port scanning with a custom TCP connect scanner (~200ms for a /16 sweep test)
- Merges output from sublist3r, amass, and nmap into a single JSON report
- Idempotent and fully offline-capable for lab use
CTF Notes Utility
GitHub ↗A small Obsidian-style note organizer for CTF progress: machine metadata, flags, and walking notes export to Markdown for publishing writeups.
- Front-matter-first: platform, difficulty, tags flow straight into site writeups
- One-command export hooked into this repo's _writeups/ folder
Keeping a few documented projects consistently beats a long list of
half-finished ones. Add more entries in _data/projects.yml.