Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

Python CLI for detecting cloud storage misconfigurations. AWS S3 real API scanning with boto3. Azure Blob and GCP Storage on roadmap.

Secure TOTP code gateway with Zulip bot integration. Provides MFA codes to team members based on Zulip channel membership, with VPN-restricted access and encrypted secret storage.

A network security tool that analyzes hosts from an Nmap scan or YAML inventory, classifies them by role and sensitivity, and generates a least-privilege segmentation plan. It creates security zones, justified firewall rules, and compares attack paths before and after segmentation to show reduced lateral movement.

Security header auditor and Proof of Concept (PoC) for missing security headers on Gate.io platform. Web infrastructure security analysis.

Cloud and Kubernetes security automation lab with Terraform, AWS, Prowler, Checkov, Trivy, Gitleaks, K3s, and Kyverno policy-as-code.

NOEMVEX APEX PREDATOR v6.0: Advanced Active Directory Offensive Suite. Automates complex domain compromise paths via Kerberos Delegation Abuse (RBCD, Unconstrained), krbtgt Hygiene Audits (Golden Ticket), AD CS hunting, and ZeroLogon. Delivers SIEM-ready JSON v3.0 telemetry and Executive HTML dashboards for Red Teams.

A secure, API-driven microservice for managing and rotating secrets in AWS using FastAPI, Terraform, and AWS Secrets Manager. This project was built to demonstrate best practices in cloud security, data privacy, and DevSecOps automation.

주요정보통신기반시설 취약점 분석·평가 결과를 오프라인으로 판정하고 Excel 보고서와 보안 권고문을 생성하는 Python 도구

Automated IaC security pipeline scanning Terraform, Ansible, Dockerfiles, Kubernetes and Docker Compose on every push — Trivy · Checkov · ansible-lint · tflint · Hadolint — integrated with Jenkins and GitLab.