Source_Node_01
Regulatory Compliance & Secure System Architecture (NIST/ISO 27001)
Objective: To architect a secure, compliant SaaS environment aligned with ISO 27001 and …
Compliance
NIST
ISO 27001
Secure Architecture
search
Security Operations (SOC) & Incident Response
Source_Node_01
Command Injection
Sep 2025
Web-to-System Pivot via Command Injection
Objective: To exploit a Command Injection vulnerability in a web application to bypass …
Command Injection
Web Security
Privilege Escalation
Source_Node_01
Post-Exploitation
Sep 2025
Post-Exploitation & Sensitive Data Exfiltration
Objective: To leverage administrative access to extract the system’s “Shadow” file, …
Post-Exploitation
Lateral Movement
Linux
Exfiltration
Penetration Testing & Vulnerability Assessment
Source_Node_01
Password Cracking
Apr 2026
Fowsniff — Credential Harvesting & Password Cracking
Objective: To exfiltrate and crack leaked credentials from unencrypted data sources to …
Password Cracking
Credential Harvesting
Information Disclosure
John the Ripper
Source_Node_01
WordPress Security
Mar 2026
Mr. Robot — Web Exploitation & System Compromise
Objective: To demonstrate a full-stack compromise, from website reconnaissance and …
WordPress Security
CTF
Privilege Escalation
Reconnaissance
Source_Node_01
Linux Security
Mar 2026
Kenobi — Exploiting NFS Misconfigurations & Privilege Escalation
Objective: To demonstrate the use of insecure service configurations and SUID binaries to …
Linux Security
Privilege Escalation
NFS
ProFTPd
Source_Node_01
Windows Security
Mar 2026
Blue: EternalBlue Exploitation & Privilege Escalation
Objective: To identify and exploit the MS17-010 (EternalBlue) vulnerability on a legacy …
Windows Security
RCE
Privilege Escalation
MS17-010
Source_Node_01
Metasploit
Sep 2025
Exploiting Infrastructure Vulnerabilities (Backdoor Access)
Objective: To execute a remote command execution (RCE) exploit against a backdoored FTP …
Metasploit
Exploitation
CVE
Vulnerability
Source_Node_01
Nmap
Aug 2025
Service Enumeration & Vulnerability Research
Objective: To perform deep-packet inspection and service fingerprinting on a target host …
Nmap
Reconnaissance
Enumeration
Services
Network & Infrastructure Security
Source_Node_01
Blue Teaming
Apr 2026
Network Traffic Analysis & Incident Response (Wazuh & PCAP)
Objective: To perform a technical post-mortem analysis of a network intrusion attempt …
Blue Teaming
Incident Response
Log Analysis
Wazuh
Source_Node_01
SIEM
Apr 2026
Hybrid SIEM Architecture for SEO & Security Intelligence
Objective: To design and implement a unified SIEM workflow that integrates Splunk and …
SIEM
SEO Security
Threat Intelligence
Automation
Source_Node_01
Wireshark
Nov 2025
Network Traffic Baselining and Anomaly Detection
Objective: To establish a behavioral baseline for legitimate network traffic and use …
Wireshark
Network Monitoring
Indicators of Compromise
Traffic Analysis
Source_Node_01
Network Security
Nov 2025
Centralized Network Security via Router-Level Filtering
Objective: To implement non-device-specific security controls by enforcing domain blocking …
Network Security
Firewall
Gateway
IoT Security
Source_Node_01
Automation
Nov 2025
Automated Domain Blocking via Batch Scripting
Objective: To develop a reusable and scalable automation tool for neutralizing network …
Automation
Security Engineering
C2 Mitigation
Endpoint Security
Source_Node_01
Wireshark
Jul 2025
Network Traffic Analysis & Automated Threat Mitigation
Objective: To identify suspicious network traffic using protocol analysis and implement …
Wireshark
DNS
C2
Defense-in-Depth
Source_Node_01
VirtualBox
Jul 2025
Defensive Lab Environment & Network Configuration
Objective: To design and deploy a secure, isolated virtualization environment for …
VirtualBox
Networking
Isolation
Lab Setup
Source_Node_01
Network Security
Jul 2025
Network Security Fundamentals and Threat Assessment
Objective: To conduct a comprehensive study of network threat vectors and security …
Network Security
Risk Management
CIA Triad
Defense-in-Depth
Application Security (AppSec)
Source_Node_01
Database Security
Apr 2026
Database Encryption & Sensitive Data Protection (MongoDB)
Objective: To implement Client-Side Field-Level Encryption (CSFLE) in a NoSQL environment …
Database Security
Encryption
MongoDB
Data Privacy
Source_Node_01
NoSQL Injection
Apr 2026
NoSQL Injection & Database Poisoning (Vouched Application)
Objective: To identify and exploit NoSQL injection vulnerabilities within the “Vouched” …
NoSQL Injection
MongoDB
API Security
Vouched
Source_Node_01
Session Security
Apr 2026
Secure Session Architecture & Defensive Flag Implementation
Objective: To implement a “Secure-by-Design” framework for web applications to neutralize …
Session Security
Defense-in-Depth
Cookie Flags
Web Architecture
Source_Node_01
Cookie Theft
Apr 2026
Session Hijacking via Automated Cookie Exfiltration
Objective: To demonstrate the ease of unauthorized cookie acquisition and subsequent …
Cookie Theft
Session Hijacking
Web Security
Identity Theft
Source_Node_01
IDOR
Dec 2025
Insecure Direct Object Reference (IDOR) & Path Traversal Discovery
Objective: To identify and verify directory traversal vulnerabilities that allow …
IDOR
Path Traversal
Vulnerability Discovery
Web Security
Source_Node_01
Remediation
Dec 2025
Vulnerability Analysis and Remediation Planning
Objective: To systematically document discovered web vulnerabilities and provide …
Remediation
Secure Coding
Vulnerability Management
Defensive Strategy
Source_Node_01
Vulnerability Scanning
Dec 2025
Automated Web Application Vulnerability Discovery
Objective: To utilize automated scanning tools to perform comprehensive reconnaissance and …
Vulnerability Scanning
OWASP ZAP
Reconnaissance
Security Assessment
Source_Node_01
SQL
Oct 2025
Database Breach & Administrative Data Exfiltration
Objective: To leverage a compromised web shell to gain unauthorized access to the backend …
SQL
Database Security
Data Breach
Dump
Source_Node_01
CSRF
Aug 2025
Cross-Site Request Forgery (CSRF) via Forged Reviews
Objective: To exploit missing request verification to perform unauthorized actions on …
CSRF
Session Management
OWASP
Auth Bypass
Source_Node_01
XSS
Aug 2025
DOM-Based Cross-Site Scripting (XSS) Analysis
Objective: To identify and exploit an unsafe JavaScript “sink” to execute arbitrary code …
XSS
JavaScript
Security Engineering
Remediation
Source_Node_01
SQLi
Aug 2025
Exploiting & Mitigating String-Based SQL Injection
Objective: To demonstrate how unsanitized user input allows attackers to bypass …
SQLi
WebGoat
Database Security
Parameterized Queries
DevSecOps & Cryptography
Source_Node_01
Blockchain Forensics
Mar 2026
Blockchain Forensics: Private Key Retrieval & Transaction Hijacking
Objective: To demonstrate the technical impact of private key exposure by automating the …
Blockchain Forensics
Private Key Theft
Wallet Security
BIP39
Source_Node_01
Blockchain
Mar 2026
Blockchain Forensics & Incident Post-Mortem (Bitfinex Case Study)
Objective: To analyze high-scale cryptocurrency heists and identify the critical security …
Blockchain
Digital Forensics
Incident Response
Crypto Security
Source_Node_01
SELinux
Jan 2026
Mandatory Access Control (MAC) using SELinux
Objective: To enforce strict security policies at the kernel level, preventing …
SELinux
MAC
Kernel Security
Least Privilege
Source_Node_01
Hashing
Jan 2026
Data Integrity Verification via Cryptographic Hashing
Objective: To utilize one-way hashing algorithms to verify data authenticity and secure …
Hashing
Data Integrity
SHA-256
Password Security
Source_Node_01
Cryptography
Jan 2026
Cryptographic Infrastructure & Secure Communication
Objective: To implement and manage cryptographic systems that ensure end-to-end data …
Cryptography
PKI
Encryption
Identity Verification
Source_Node_01
Cryptography
Sep 2025
Offline Cryptanalysis & Password Recovery
Objective: To utilize high-performance cracking tools to perform a dictionary attack …
Cryptography
Password Cracking
John the Ripper
Hashes