authentication-security

HowToLogin - HTLogin is authentication security scanner for login forms, APIs, and SPAs. With bypass testing, enumeration, rate-limit checks, and evidence-based detection.

Local PHP/MySQL e-wallet application combined with a hands-on cybersecurity demo lab. Implements user/admin auth, balances, transfers, CSRF protection, session timeouts, login lockout, and hashing. Includes a toggleable Vulnerable/Secure lab to demonstrate XSS and session hijacking with real code and mitigations.

A hands-on simulation of attacking a vulnerable login page using Python. This repo includes a Flask-based vulnerable login page and Python scripts to exploit weaknesses in regex validation and brute-force login attempts. Perfect for learning web penetration testing basics and ethical hacking techniques.

This project demonstrates SSH authentication log analysis using Splunk SIEM to detect malicious activity such as brute-force attacks, unauthorized access attempts, and suspicious SSH behavior. It simulates real-world SOC analyst workflows, including log ingestion, SPL queries, dashboards, and alerting.

A centralized collection of shields (badges) and official documentation links for frontend, backend, databases, cloud, DevOps and more.

A Bash-based password security toolkit that checks strength against common passwords, provides color-coded scoring & feedback, and logs results for security auditing.

Brute force detection and defense in a vulnerable flask login application.

Password security assessment and credential attack simulation toolkit

Security-first fintech app built during internship at a BDL-licensed platform, found and fixed 6 critical vulnerabilities including SQL injection, broken auth, and session flaws

🎮 A full-stack multiplayer Pong game reimagined with modern web tech: Fastify, TypeScript, TailwindCSS, SQLite, Docker, OAuth2, JWT, AI opponent, and Blockchain score storage. Built as the final core project at 42 Beirut.

Investigated suspicious Windows and Linux activity by correlating account manipulation, privilege escalation, SSH authentication, potential lateral movement, and file integrity events. Built a timeline using Wazuh telemetry, identified key indicators, documented evidence, and developed response actions and security recommendations.

SecureAura is a Dockerized microservices framework that defends authentication endpoints from timing-based side-channel attacks.

Password Strength Analyzer with brute force simulation (educational). Evaluates password complexity, detects weak/common passwords, and provides improvement recommendations. Practical project focused on password security awareness and defensive security practices.

Python-based SOC tool to detect brute force attacks using failed login patterns, time-based analysis, and risk scoring.

Vulnerability Analysis Portfolio