Cam Lee Home

OWASP Juice Shop Ethical Hacking Lab

I completed a time-boxed ethical hacking assessment of OWASP Juice Shop as the final exam for my college Ethical Hacking course. I had approximately one to two hours to test the intentionally vulnerable application, document my attempts, capture evidence, and explain potential mitigations.

I successfully demonstrated chatbot prompt manipulation and cross-site scripting. I also attempted SQL injection and directory discovery and performed a limited ICMP traffic-flood test inside the local lab environment.

The project helped me practice prioritizing tests under a deadline, separating confirmed findings from assumptions, documenting unsuccessful and inconclusive results, and explaining how vulnerabilities could be reduced.

View Project on GitHub

AWS VPC Networking Lab

I built and documented an AWS network containing public and private subnets, an EC2 Linux instance, a private MySQL server, an internet gateway, route tables, and security groups as part of an IT Infrastructure course final.

I troubleshot failed connectivity by configuring an internet route, allowing outbound HTTPS traffic for package installation, and limiting MySQL traffic to the private database server.

I then connected to the database from the EC2 instance, ran SQL commands to verify connectivity, documented CIDR ranges, and created an AWS network architecture diagram. The project strengthened my understanding of routing, ports, subnet design, security groups, and cloud network troubleshooting.

View Project on GitHub

Nessus Vulnerability Management Lab

I created a Windows 10 virtual lab and used Nessus Essentials to compare uncredentialed and credentialed vulnerability scans.

I intentionally installed outdated software to increase the system's security exposure, reviewed the resulting findings, removed the vulnerable software, applied Windows updates, and rescanned the system.

By comparing the scan results before and after remediation, I was able to verify improvement and practice the full vulnerability-management process of scanning, identifying risk, remediating findings, and validating fixes.

View Project on GitHub

Elastic SIEM Home Lab

I completed a tutorial-guided Elastic SIEM home lab using Elastic Cloud, a Kali Linux virtual machine, Elastic Agent, and Elastic Defend.

I configured endpoint telemetry collection, generated activity using Nmap and Linux commands, searched process logs, and created an event-count dashboard in Elastic.

I also built a custom detection rule for scan-related activity and completed an email-alert testing workflow. The project gave me practical experience with SIEM monitoring, endpoint telemetry, log analysis, dashboards, detections, and alerting.

View Project on GitHub

Information Systems Security Policy Framework (ISSP)

I developed an Information Systems Security Policy framework for Swift, a fictional student transportation platform, during my Introduction to Information Security course.

I documented security governance, organizational responsibilities, risk management, data classification, incident response, access control, system security, vulnerability management, backups, logging, and compliance considerations.

I later reorganized the original coursework into structured GitHub documentation and separated the original academic work from later future-improvement ideas. The project strengthened my understanding of GRC, security policy development, risk management, and security governance.

View Project on GitHub

Scapy and iptables Firewall Defense Lab

I completed the defensive portion of a tutorial-guided Linux firewall lab using Python, Scapy, tcpdump, and iptables on my own Linux virtual machine.

I monitored incoming TCP SYN traffic, manually created and removed firewall rules, configured a Python virtual environment, installed Scapy, and ran the supplied firewall automation script.

I also analyzed how the script tracked repeated activity, temporarily blocked source IP addresses, and removed firewall rules after the configured duration. My documentation covers setup, troubleshooting, testing, code behavior, limitations, attribution, and possible future improvements.

View Project on GitHub

Sports League SQL Database

I created a relational MySQL database for a fictional basketball league as one of my first college database projects.

The database uses seven connected tables to organize divisions, conferences, states, teams, players, positions, and career statistics. Primary and foreign keys connect related information throughout the database.

I later expanded the project documentation with an entity-relationship diagram, MySQL Workbench screenshots, and demonstration queries using joins, grouping, calculations, and subqueries.

View Project on GitHub

Cloudflare Visitor Reporting System

I built and integrated a serverless visitor-reporting system for my personal website using AWS S3, Cloudflare Workers, Workers KV, Cron Triggers, and the Resend API.

I configured website hosting, Cloudflare routing, request handling, temporary visitor-data storage, automated reporting schedules, encrypted secrets, and email delivery.

I also developed filtering and classification logic to make the reporting more useful while troubleshooting the complete workflow across browsers, command-line testing, VPN connections, Cloudflare services, AWS, and Resend.

View Project on GitHub

AWS S3 Static Website and Server Site

I customized a website using an HTML template and deployed it through Amazon S3 static website hosting.

I configured the S3 bucket and its permissions, uploaded website files, worked with the S3 website endpoint, and verified that the hosted site functioned correctly.

I also configured an HTTPD server, copied website files from S3 into the appropriate server directory, worked with deployment and routing configuration, and verified the server-hosted version of the website.

Web Development and Server Management

I created a dedicated directory for a new website on a server and developed the site's index.html file.

I created and configured an Apache Virtual Host using settings including ServerAdmin, ServerName, ServerAlias, DocumentRoot, ErrorLog, and CustomLog.

I enabled the site, verified that Apache was operating correctly, and updated the local hosts file so requests were routed to the appropriate website.

Building a Network

I designed network topologies for several buildings based on their layouts, device counts, and connectivity requirements.

I created a tree topology for Scovill, a ring topology for Gorin, a hybrid topology for University Commons, a star topology for PCN, and a point-to-point or bus-style design for Kirkland.

The project required comparing different network designs and considering how building structure, device placement, and connectivity requirements could influence the most appropriate topology.

Google Gruyere Web Security Lab

I used Google Gruyere as an authorized web-security learning environment to practice identifying and testing web-application vulnerabilities.

My testing included areas such as brute-force attacks, cross-site scripting, phishing concepts, and client-state manipulation.

I also reviewed prevention and mitigation approaches for the vulnerabilities I studied, helping me better understand both offensive security techniques and the defensive controls used to reduce those risks.