NSNishan Singh

02 · Cybersecurity Journey

Real labs. Real reports. Real progress.

Controlled Kali Linux labs, Nessus vulnerability assessments, Nmap scans, and OSINT practice — all documented as structured, evidence-based reports. Targeting eJPT → OSCP.

Free tool: Website Security Health CheckPassive scan for HTTPS, headers, cookies, and SPF/DMARC

Labs & Reports

Featured coursework and hands-on study references — defensive, academic security work documented as labs and structured reports.

OpenSSL Cryptography Lab

Lab · Hashing, encryption & digital signatures

OpenSSL terminal session: MD5, SHA-1 and SHA-256 digests of a file, identical hashes for identical input, RSA encryption and decryption of a message, and signing then verifying a message — with a tampered message producing a verification failure.
Using OpenSSL on Kali Linux to demonstrate core cryptography: file hashing with MD5, SHA-1, and SHA-256 (identical inputs produce identical hashes), RSA public-key encryption and decryption of a message, and digital signatures — signing with the private key and verifying with the public key, including detecting a tampered message as a verification failure. No private key material is shown.
REPORT

Information Risk Management Plan

Capstone: ISO 27005 / NIST SP 800-30 risk plan — asset inventory, scored risk register, layered treatment, and governance. Read online or download the report and briefing.

Read & download
PDF

Safeguard Controls: Brute Force & Malware

Defensive controls mapped to NIST / ISO 27002 / CIS.

View PDF
DOCX

Red Team Risk Scenario Report

A study-reference risk scenario write-up analyzing an attack path and the defensive controls that address it.

Download

Downloadable documents open in a new tab. Shared as academic study references from defensive security coursework.

Lab writeups

Completed

Kali Linux & Metasploitable2 Lab

A controlled virtual lab for learning safe enumeration, Linux workflow, vulnerable services, and report writing.

Kali LinuxMetasploitable2VirtualBox

View report

Completed

Nmap Network Scanning

A service detection scan of the Metasploitable2 target at 192.168.128.2 using Nmap 7.98.

NmapKali LinuxLinux terminal

View report

Completed

Nessus Vulnerability Assessment

A vulnerability assessment workflow using Nessus and Nmap to identify, prioritize, and document weaknesses in a Metasploitable2 lab target.

Nessus EssentialsKali LinuxMetasploitable2

View report

Completed

Netflix OSINT Reconnaissance

An OSINT report practice exercise focused on public information gathering, scope discipline, and responsible documentation.

WHOISDNS lookupSearch operators

View report

In Progress

DNS Enumeration Lab

A DNS-focused lab for understanding records, name resolution, and public infrastructure signals.

dignslookuphost

View report

In Progress

WHOIS Investigation Lab

A public registry investigation lab for understanding domain ownership signals, registration metadata, and privacy limits.

WHOISRDAPICANN Lookup

View report

Completed

Metasploit Exploitation Lab

Exploited Metasploitable2 using Metasploit Framework — attempted VSFTPD 2.3.4 backdoor (unsuccessful) and successfully achieved root access via the Samba Usermap Script vulnerability.

Metasploit FrameworkKali LinuxMetasploitable2

View report

Completed

Password Cracking with Hashcat

Cracked an MD5 password hash in under one second using Hashcat and the rockyou.txt wordlist, demonstrating how weak passwords and unsalted hashes are trivially compromised.

HashcatKali Linuxrockyou.txt

View report

In Progress

Active Directory Domain Controller Setup

Building a Windows Server 2022 domain controller from scratch — starting with static IP addressing on the Parallels shared network and a standards-based server rename to HNH-DC01.

Windows Server 2022Parallels DesktopServer Manager

View report

Completed

PW2 — OpenLDAP Directory Services

Deployed and configured OpenLDAP (slapd 2.6.13) on Kali Linux: directory structure with OUs, users and groups, LDIF entries, ldapsearch verification, and a comparison of LDAP vs local Linux accounts with file permission testing.

OpenLDAPLDAPLinux

View report

Completed

PW3 — Access Control Models

Implemented and compared DAC, RBAC, MAC, and ACLs on a single Linux host — chmod/chown, group-based RBAC, an AppArmor 4.1.7 profile, and setfacl/getfacl — each tested with real user accounts.

Access ControlAppArmorRBAC

View report

Completed

PW4 — OpenAM Identity Federation & SSO

Built a two-host lab (Ubuntu 24.04 + Kali) running OpenAM 15.2.2 on Tomcat 9 against an OpenLDAP backend: realm configuration, LDAP data store, policy agents, and verified single sign-on across two applications sharing one iPlanetDirectoryPro session token.

OpenAMSSOSAML

View report

Learning notes

Vulnerability Management

What is a CVE?

A simple explanation of how public vulnerability identifiers help teams track and communicate known security issues.

Read note

Network Security

What is a Firewall?

A firewall filters network traffic based on rules, trust zones, ports, protocols, and security policy.

Read note

Threats

What is a Zero-Day Vulnerability?

A zero-day is a vulnerability that is unknown to the vendor or unpatched when it can potentially be exploited.

Read note

Security Concepts

What is the Cyber Kill Chain?

A model for understanding attacker activity from reconnaissance through actions on objectives.

Read note

Security Principles

What is Non-Repudiation?

Non-repudiation gives confidence that an action or transaction cannot later be credibly denied.

Read note

Vulnerability Management

What is Vulnerability Assessment?

A process for identifying, validating, prioritizing, and documenting security weaknesses.

Read note

Tools & stack

Kali LinuxNmapNessusWiresharkBurp SuiteMetasploitable2OSINT Tools

Status: actively studying · targeting eJPT → OSCP