Work

Replaced clicking through the AWS console with Terraform. Built a custom VPC, hardened the security groups, and moved state to an S3 backend after I duplicated resources one too many times.

Terraform · AWS VPC · EC2 · S3 backend

A segregated lab for running an attack end to end against a Linux target. Reverse shell through Metasploit to get around egress filtering, a vsFTPd 2.3.4 backdoor for the foothold, then John the Ripper on the shadow file.

Kali · Metasploit · Nmap · John the Ripper

A retrieval pipeline over a large Amazon product dataset. Loading the whole file crashed the server, so I moved to DuckDB streaming and cut the memory footprint. Database sits in a private subnet.

DuckDB · Vector DB · AWS VPC · Embeddings

The Hugo and Docker setup behind my previous site, including the GitHub Actions pipeline. Documented because the container networking and submodule problems took longer to solve than the site did.

Docker · Hugo · GitHub Actions

Spreading traffic across instances on AWS and watching what happens to live connections when a target drops out of the pool.

AWS EC2 · Load Balancer

Reading TCP behavior straight from a capture — the handshake, retransmissions, and how congestion control reacts when things go wrong.

Wireshark · TCP/IP

Backups that only run when someone remembers eventually stop running. Versioning, lifecycle rules, immutability, and a daily message confirming it actually worked.

Blob Storage · Versioning · Lifecycle · Logic Apps

Owners can't tell what their cloud bill will be until it shows up. This one runs on the real spend from the other four Azure builds.

Cost Management · Monitor · Logic Apps · Workbooks

The site goes down and the owner hears about it from a customer. Three checks, alerts in seconds, and a dashboard showing the trend.

Timer Functions · Email/SMS · Workbooks

Sorting and routing incoming email with a model. That means untrusted text reaching something that can take actions, so it needs real injection defenses.

App Service · Azure OpenAI · SQL · Logic Apps

Stock decisions made on gut instead of data. Live stock levels plus restock predictions.

App Service · SQL · Azure OpenAI