Controlled Red-Team Simulations & IAM Audit Pipelines
A collection of security assessment tools simulating attacks and identifying over-privileged credentials to verify enterprise infrastructure security.
Enterprise IAM configurations are complex, frequently leading to security cracks like over-privileged keys and vulnerable access paths.
Enables security teams to find and patch permission weaknesses before malicious actors exploit them.
Interactive CLI panel showing live audit logs and vulnerability scans.
Identifies roles containing excessive permissions like administrator access.
Aggregates threat findings and categorizes threat risks.
Audit simulation interface. Trigger actions execute step-by-step security scans, parsing configuration files and outputting findings into terminal logs and status reports.
Simulation Trigger ──> Terminal Script Loader ──> Action Log Generator
│
┌──────────────────────────────────────────────────────────┘
▼
Vulnerability Scan Heuristics ──> IAM Rule Checker ──> Risk Summary Reportsecurity-tooling/ ├── index.html # Interface mockup ├── requirements.txt └── audit_sim.py # Threat detection logic
Run active operations audits utilizing the custom sandbox telemetry receiver widget below.
Running live security tests on production networks is dangerous and violates cloud usage policies.
Local mock database sandboxes
Accepted using static sandbox environments to prioritize safety, stability, and zero risk to live business systems.
Integrate read-only API connectors to let users scan local dev environments securely.
Mock terminal outputs must parse config data safely without exposing active system keys.
Optim:Optimized local parsing models and state rendering logic.
Rendering long CLI log streams on simple web pages degraded layout performance and caused visual lag.
Root Cause:React re-rendered the full logging screen on every new log update, creating heavy layout recalculations.
Observed page rendering lag when running long audit sequences, noting high CPU usage in browser logs.
Used state accumulation buffers to batch log rendering updates, updating the DOM only on 100ms intervals.
Introduced a minor lag in printing lines, but decreased CPU layout overhead by 80%.
Web interfaces require throttled state updates when rendering large streams of high-frequency data.
Always batch layout updates when building high-frequency monitoring interfaces.
Isolating security logic from interface screens simplifies porting components between platforms.
Technical security teams require clear, raw data listings over complex dashboard metrics.
I would convert logs to interactive elements, letting analysts expand individual rows to view details.
Audit raw repository script configurations directly inside the active terminal workspace.
Keep exploring
An event-driven cloud security analytics pipeline that ingests AWS CloudTrail records, applies normalization and risk scoring heuristics, and fires alert integrations under 45 seconds to secure distributed multi-tenant AWS accounts.
ArchitectureCloudTrail → S3 → Lambda → EventBridge → SNS
An AI-powered resume optimizer analyzing professional summaries against target job descriptions, providing real-time ATS scores and impact-driven writing tips.
ArchitectureResume Text → Client Parser → ATS Score · API → LLM → Rewrite
A routing engine simulator analyzing OSPF vs EIGRP performance under varying traffic levels and Access Control List (ACL) constraints, complete with interactive configuration widgets and raw data export.
ArchitectureConfig Inputs → Interpolation Engine → Telemetry Panels