Skip to content
View zachwenger's full-sized avatar
0 followers · 4 following

Block or report zachwenger

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
zachwenger/README.md

● Zach Wenger

19 · San Diego · cybersecurity student at SD City College. SOC analyst track. Currently studying for CompTIA Security+.

I build security tools, run my own lab work, document everything in public, and ship vanilla web apps on the side.

Cybersecurity portfolio

Project What it is
honeypot Multi-port Python honeypot on AWS EC2 — captured live botnet traffic in <60s. Includes Sigma detection rules + MITRE ATT&CK mapping.
homelab-pentest-v1 Full kill-chain pentest on an isolated Kali → Windows lab, exploiting EternalBlue (MS17-010). Includes blue-team Sigma rules + remediation playbook.
password-manager Local-first AES-encrypted vault with proper threat model. Built to understand crypto primitives, not to compete with Bitwarden.

Things I ship outside cybersec

Project What it is
pulse-habit-tracker · live Single-file vanilla PWA habit tracker. Solo Leveling-inspired XP/rank layer, custom hex color picker, hardened CSP, offline-first.

Stack

Cybersecurity — Python · Nmap · Metasploit · Wireshark · Kali Linux · VirtualBox · AWS · Sigma · MITRE ATT&CK

Web — Vanilla JS / HTML / CSS · Next.js · Supabase · Stripe · Service Workers · CSP hardening

Tooling — Git · GitHub Actions · Obsidian · VS Code

Currently

  • Studying for CompTIA Security+ (SY0-701)
  • Building out an Active Directory lab with Splunk for detection engineering
  • Documenting every lab + project with detection rules + MITRE mappings — the work I want to be doing in a SOC seat, made visible

Reach me

Pinned Loading

  1. homelab-pentest-v1 homelab-pentest-v1 Public

    Full kill-chain pentest exploiting EternalBlue (MS17-010) on an isolated Kali → Windows lab. Includes blue-team Sigma rules + remediation playbook.

  2. password-manager password-manager Public

    Local-first AES-encrypted password manager in Python. Built to learn crypto primitives — full threat model + honest comparison vs Bitwarden / 1Password.

    Python

  3. honeypot honeypot Public

    Multi-port Python honeypot deployed on AWS EC2 — captured live botnet traffic in <60s. Includes Sigma detection rules + MITRE ATT&CK mapping.

    Python

  4. pulse-habit-tracker pulse-habit-tracker Public

    Single-file vanilla PWA habit tracker. Solo Leveling-inspired XP/rank layer, custom hex color picker, hardened CSP, offline-first, auto-update.

    HTML