← All Projects

CYBERSECURITY / SECURITY TESTING

Internal Pen-Testing Assessment

A controlled assessment workflow spanning reconnaissance, validation, impact analysis, and practical remediation. 
A simulated enterprise engagement identified critical weaknesses including SMBv1/MS17-010 exposure, insecure broadcast name resolution, weak credential protections, Active Directory privilege-path issues, exposed RDP, and web application vulnerabilities..

Kali Linux Nmap Burp Suite Wireshark Remediation

Academic controlled - lab assessment · 2026

ASSESSMENT DASHBOARD REPORT VIEW
01 Legacy exposure Reduce attack surface
02 Access pathways Review privilege boundaries
03 Service hardening Strengthen configurations
04 Detection coverage Improve visibility
RECONNAISSANCE → VALIDATION → REMEDIATION PLAN

THE APPROACH

Technical detail.
Clear decisions.

This project brings together practical implementation thinking, clear documentation, and an emphasis on making complex technical work understandable and useful.

PROJECT WALKTHROUGH

Inside the work

01

Assessment objectives

The assessment examined the security posture of internal network devices and an employee-facing web application, with attention to weaknesses that could enable privilege escalation or lateral movement.

02

Tools and validation

The documented workflow used reconnaissance, vulnerability analysis, controlled exploitation techniques, and packet inspection. Tools included Kali Linux, Nmap, Burp Suite, and Wireshark.

03

Prioritized remediation

Findings were translated into corrective actions around legacy operating systems, service exposure, access control, configuration hardening, and monitoring. The emphasis is not only on finding weaknesses, but on making the next security action clear.

04

Deliverables

Both a full report and PowerPoint presentation presented our completed assessment, providing all discovered risks, recommendations, and remediations. The project represented throughout the report pages demonstrate more than familiarity with individual cybersecurity tools. They show my ability to work from a defined scope, investigate technical evidence, recognize security weaknesses, validate findings in controlled environments, document risk, recommend specific improvements, and communicate results to technical and non-technical audiences.


FULL CLIENT ENGAGEMENT REPORT


CLIENT OUTBRIEF PRESENTATIONT

YOUR NEXT PROJECT

Let’s solve the right problem.

Tell us what you need to improve, build, secure, or simplify.

Start a conversation ↗