Auto OSCP Recon Notes
A Python CLI that turns Nmap XML from authorized labs into structured plain-text notes, service checklists, and a report template. Built for my own OSCP workflow.
Cybersecurity Portfolio
Cybersecurity student with real data center experience. I build practical security tools, break things in legal labs, and document everything.
I'm Jun Han, a cybersecurity student at UOW/SIM with a background that's a bit different from most — I started in a data center. Running cables, managing racks, troubleshooting hardware at Equinix and Alibaba Cloud taught me that uptime isn't a dashboard metric; it's sweat and procedure.
That operations foundation shapes how I approach security. I don't just run tools — I understand the systems underneath. I'm building OSCP-track fundamentals through legal labs (HTB, THM, PG Practice), writing Python automation for repetitive security workflows, and keeping notes clean enough to survive contact with real incidents.
I'm currently open to junior cybersecurity, cloud security, infrastructure-security, and security-engineering roles where I can put both the operations and security skills to work.
Real code, real tests, real documentation. No filler repos.
A Python CLI that turns Nmap XML from authorized labs into structured plain-text notes, service checklists, and a report template. Built for my own OSCP workflow.
Hash-chain one-time password scheme in standard-library Python. Builds SHA-256 chains, discloses in reverse, and verifies against a moving anchor — with tests for replay, forgery, and exhaustion.
Anomaly-based IDS that builds a statistical baseline from activity data and flags deviations using weighted scoring. University project where I owned the activity engine and logs modules.
Coursework exploring targeted attacks on a VGG-11 CIFAR-10 classifier: grey-box transfer, universal perturbations, and an adaptive EOT attack against a randomised defence.
A Scapy-based Python toolkit that pairs passive ARP spoofing detection with an authorized-lab demonstration of ARP cache poisoning.
An OpenSSL and Python demonstration of hybrid encryption, combining AES data encryption with RSA-OAEP key wrapping and verify-before-delete safeguards.
A minimal TCP listener and client that demonstrate reverse-shell mechanics with a JSON protocol in controlled, authorized lab environments.
A controlled CTF lab walkthrough covering UDP service discovery, raw service interaction, targeted MD5 recovery, and result verification.
RFC 6238 time-based one-time passwords in standard-library Python — the scheme behind authenticator apps. Verified against official test vectors with SHA-1, SHA-256, and SHA-512.
This site. Plain HTML, CSS, and JavaScript — no frameworks, no build step, no bloat. Responsive, accessible, and hosted on GitHub Pages.
Structured methodology for legal lab practice — enumeration checklists, web testing notes, privilege-escalation templates, and post-box reflections. Turns practice into evidence.
What I bring to the table right now — honest levels, no inflation.
The path that got me here — from data center floors to security labs.
UOW/SIM cybersecurity program. Building public projects that demonstrate practical skills rather than just collecting certificates.
Structured lab time across enumeration, web testing, privilege escalation, and documentation. Building the methodology before the exam.
Equinix & Alibaba Cloud — hardware, racks, structured cabling, incident response, and the kind of troubleshooting you learn when something is down at 3 AM.
Built discipline, pressure handling, teamwork, and respect for clear operating procedures. These translate directly to security operations.
Open to junior cybersecurity, cloud security, and infrastructure-security roles. Let's talk.