labs & reports
Hands-on lab work from my cybersecurity studies. Full write-ups of what I built, how I tested it, and what the results showed — documented the way I'd document a client engagement.
Every report is readable in full on this site. The PDF is there if you want it, but nothing is hidden behind the download.
Long-form identity and access management reports, each reproduced in full as a web page.
Deployed and configured OpenLDAP (slapd 2.6.13) on Kali Linux: directory structure with OUs, users and groups, LDIF entries, ldapsearch verification, and a comparison of LDAP vs local Linux accounts with file permission testing.
Implemented and compared DAC, RBAC, MAC, and ACLs on a single Linux host — chmod/chown, group-based RBAC, an AppArmor 4.1.7 profile, and setfacl/getfacl — each tested with real user accounts.
Built a two-host lab (Ubuntu 24.04 + Kali) running OpenAM 15.2.2 on Tomcat 9 against an OpenLDAP backend: realm configuration, LDAP data store, policy agents, and verified single sign-on across two applications sharing one iPlanetDirectoryPro session token.
Shorter hands-on labs — scanning, exploitation, password cracking, OSINT and Active Directory — each with objective, steps, findings and evidence.
A controlled virtual lab for learning safe enumeration, Linux workflow, vulnerable services, and report writing.
A service detection scan of the Metasploitable2 target at 192.168.128.2 using Nmap 7.98.
A vulnerability assessment workflow using Nessus and Nmap to identify, prioritize, and document weaknesses in a Metasploitable2 lab target.
An OSINT report practice exercise focused on public information gathering, scope discipline, and responsible documentation.
A DNS-focused lab for understanding records, name resolution, and public infrastructure signals.
A public registry investigation lab for understanding domain ownership signals, registration metadata, and privacy limits.
Exploited Metasploitable2 using Metasploit Framework — attempted VSFTPD 2.3.4 backdoor (unsuccessful) and successfully achieved root access via the Samba Usermap Script vulnerability.
Cracked an MD5 password hash in under one second using Hashcat and the rockyou.txt wordlist, demonstrating how weak passwords and unsalted hashes are trivially compromised.
Building a Windows Server 2022 domain controller from scratch — starting with static IP addressing on the Parallels shared network and a standards-based server rename to HNH-DC01.