The aim of this project was to conduct a basic port scan on the domain "testphp.vulnweb.com" using Nmap. This was done to identify open ports and services on the host, as part of a cybersecurity learning exercise..
Read HereIn a mission-critical role at MK-Tech, I led the creation of a secure internal communication system by establishing a local, self-signed Certificate Authority (CA). This enabled encrypted and trusted data exchange across services and empowered the development and security teams to test and deploy services within a simulated HTTPS environment.
Read HereEnterprise Networks steadily face attacks becasue they are not properly segmented This architectural design demonstrates a well-segmented approach to networking, where the network is divided into Virtual LANs (VLANs) based on departmental roles. Endpoints and servers are accessible only to authorized users within each specific department or VLAN, significantly reducing the attack surface and enhancing security..
Read HereA Windows EC2 instance was launched using the Microsoft Windows Server 2019 Base AMI. Access was established via Remote Desktop Protocol (RDP) through the AWS Management Console. The RDP client on a local machine was used to connect, with authentication via the instance’s Public DNS, default Administrator username, and the decrypted password provided by AWS..
Read HereIn this project, I set up a secure multi-account AWS environment for a fictional company (MK-Tech) using AWS Organizations. I grouped users into departments like Dev, HR, and Finance, managed access with IAM Identity Center, enforced MFA, and tested role-based permissions. This project shows my skills in AWS security and account management.
Read HereIn this article, I provisioned and configured EC2 instances in a secure VPC, setting up public and private subnets to separate the web and backend tiers. I deployed NGINX on Amazon Linux, secured the instances with Security Groups, set up proper routing, and enabled remote access through SSH. The web server was made accessible globally via its public IP.
Read Here