|
BSc (Hons) in Information Technology – Specializing in Cyber Security I am a cybersecurity undergraduate with practical experience in penetration testing, network defense, cryptography, and vulnerability research. I focus on applying defensive controls, conducting ethical offensive testing in isolated labs, and producing high-quality technical reports and reproducible playbooks. |
|
| Domain | Key Skills |
|---|---|
| Offensive Security | Penetration Testing, Metasploit, Burp Suite, OWASP ZAP, CTFs, OSINT |
| Defensive Security (SOC) | Threat Detection, SIEM, IDS/IPS, pfSense, Wireshark, Incident Response |
| Cryptography | AES, RSA, SHA-256, HMAC, Key Management |
| Networking | TCP/IP, VLANs, DHCP, DNS, Firewalls, VPNs |
| Programming & Scripting | Python (automation & tooling), Bash, JavaScript, SQL |
| Compliance & Governance | ISO/IEC 27001, PDPA, GDPR awareness |
Tools: Metasploit, Windows 7, Metasploitable2
Built an isolated red-team lab and executed controlled PoCs for MS17-010 (EternalBlue) and CVE-2014-6271 (Shellshock). Captured post-exploit evidence and documented remediation.
Repository · Report
Tools: Python, PyCryptodome, hashlib
Implemented and benchmarked AES, RSA and SHA-256 to evaluate confidentiality, integrity and authentication properties; produced performance graphs and secure usage recommendations.
Repository · Report
Focus: ISMS, Risk Register, SoA, Audit Templates
Created a full ISO 27001:2022 implementation toolkit and gap analysis guidance for certification readiness.
Repository
Stack: MERN, Role-Based Access, Phishing Simulation (controlled)
Delivered an awareness platform with quizzes, learning tracks, phishing simulation campaigns, certificates, and admin analytics.
Repository
Documented 10+ web-app assessments aligned to OWASP Top 10 with PoCs and remediation guidance.
Repository
Configured pfSense rules, traffic shaping and ran controlled DoS tests to evaluate mitigation techniques.
Repository
- Google Cybersecurity Professional Certificate
- Cisco Ethical Hacker
- Cisco Junior Cybersecurity Analyst
- Linux Administration & Security
- Cisco: Introduction to Cybersecurity
- Cisco: Networking Basics
Penetration testing, SOC operations and monitoring, cryptographic systems, threat intelligence, and security automation.
Email: [email protected]
LinkedIn: https://linkedin.com/in/aazaf-ritha
GitHub: https://github.com/AazafRitha
Medium: https://medium.com/@jamahiraazafritha
Defending the digital world through precision, ethics and technical rigor.