Projects
Sourced from projects/**/project.yaml — only projects with portfolio.enabled: true appear here.
cybersecurity
Concord
A hypothetical bank compliance framework (SBP/ISO 27001/PCI DSS/NIST CSF), plus grcmap: a cross-framework GRC mapping and gap-analysis engine grounded in the real current versions of all four frameworks.
Python · PyYAML · NIST CPRT · pytest · Ruff · GitHub Actions
cybersecurity
Penumbra
fwlint: an offline C++ static analyzer that finds shadowed, redundant, correlated, and generalized rules in real Cisco ACL / JSON firewall policies, with witness packets and SARIF output.
C++ · C++20 · CMake · vcpkg · nlohmann-json · Catch2 · SARIF
cybersecurity
Rollkeeper
A Flask student-records app with role-based access control, atomic audit logging, layered rate limiting, and a CI pipeline (Ruff/pytest/Bandit/pip-audit) -- not just a CRUD demo with security controls bolted on.
Python · Flask · Flask-SQLAlchemy · Flask-WTF · WTForms · Werkzeug · Flask-Login · Flask-Limiter · SQLite · Bootstrap · Docker · pytest · Ruff · Bandit · pip-audit · GitHub Actions
cybersecurity
Squall
A hands-on 802.11 deauth-attack lab (Aircrack-ng) plus deauthguard/, a real passive Scapy/Python flood detector -- the defensive counterpart the original lacked.
Kali Linux · Aircrack-ng · Wireshark · Python · Scapy · pytest · Ruff · GitHub Actions
cybersecurity
Temper
A lab demonstration of hash cracking with John the Ripper/Johnny, plus pwaudit: a NIST SP 800-63B-4 password-policy auditor grounded in real HIBP breach data and real John the Ripper experiments.
Kali Linux · John the Ripper · Johnny · CUPP · Python · zxcvbn · Have I Been Pwned API · pytest · Ruff · GitHub Actions
cybersecurity
Titrate
Firewall Tutor: a Blazor WebAssembly + C# tool that steps through Cisco ACL evaluation field-by-field, showing exactly why a packet was allowed or denied.
C# · .NET 10 · Blazor WebAssembly · Spectre.Console · xUnit
cybersecurity
Tremor
A passive, host-based ransomware behavioral-detection engine (RansomWatch) -- explainable sliding-window rules grounded in RansomWhere?/CryptoDrop research, no malware anywhere in the repo.
Python · PyYAML · watchdog · pytest · Ruff · GitHub Actions