█

SIEM Home Lab & Penetration Testing Lab

Isolated 3-VM cybersecurity lab on Arch Linux using KVM/QEMU and Docker, focused on end-to-end attack chains and SIEM detection.

• Built isolated 3-VM lab with Kali, Metasploitable 2, and Ubuntu SIEM host using KVM/QEMU on Arch Linux.
• Executed full attack chain: nmap reconnaissance, Hydra credential brute force, Metasploit Java RMI remote code execution, and credential exfiltration.
• Deployed Wazuh SIEM with custom detection rules mapped to the MITRE ATT&CK framework.
• Automated lab startup with bash scripting and DHCP MAC reservations for consistent IP addressing.
• Documented each attack as a professional incident-style writeup on this portfolio site.

Dotfiles

Arch Linux + Hyprland dotfiles. Kitty, Eww, Rofi, Cava. Orange and dark earth terminal aesthetic.