Hugo Herrera

Automated security system with motion sensors, automatic door control, audible/visual alarm and surveillance camera. Includes nighttime logic (01:00–05:00) with autonomous activation. Runs on Raspberry Pi, Cisco Packet Tracer, or any PC in simulation mode — same codebase, zero changes.

Hands-on lab simulating the work of a Tier 2 SOC analyst. Covers Wireshark traffic analysis, iptables hardening, Telnet vs SSH credential exposure, PCAP malware forensics, password auditing and HIDS deployment with OSSEC. Includes IoC extraction and step-by-step incident response.

Full penetration test of a deliberately vulnerable Flask app: five findings — Command Injection, Reflected XSS, CSRF, SQL Injection and an exposed debug console (RCE) — each located in source, proven with an OWASP ZAP scan of 999 requests plus manual exploits, and shipped with its own remediation. Every attack was run and verified to fire against the target and to be blocked against the hardened version.