In progress
Catchment
Replaces my dad’s handwritten rain log, and grows into managing the home’s tanks, borehole and irrigation.
Skills
Most link to where I’ve used them.
Languages
Backend and web
Infrastructure and Linux
- Linux (where I’ve used it: Homelab)
- Docker and Compose (where I’ve used it: Homelab)
- systemd (where I’ve used it: Homelab)
- Tailscale (where I’ve used it: Homelab)
- Nginx Proxy Manager (where I’ve used it: Homelab)
- Proxmox (where I’ve used it: Earlier lab)
- pfSense and VLANs (where I’ve used it: Earlier lab)
- GitHub Actions and security scanning (where I’ve used it: Pipeline write-up)
- AWS
AI and automation
- Local models with Ollama
- n8n
- Retrieval-augmented generation (RAG)
Security
- Wazuh SIEM (where I’ve used it: Earlier lab)
- CompTIA Security+
- Web security (PortSwigger Academy)
Featured work
All projectsWhat I’m building now, and a real incident I investigated.
Real incident
WordPress incident response
A small healthcare practice’s website was quietly serving spam. I traced the break-in to one admin login and tracked down what the attacker left behind.
- malicious files
- 23
- command-and-control domains
- 7
- ways the code hid itself
- 4
- of traffic lost to spam pages
- 85%
Other things I’ve built
-
Homelab
The Linux machines and self-hosted services I run at home, and the segmented Proxmox and pfSense lab I built and documented.
-
Reviser
Android spaced-repetition app with SM-2 scheduling, MCQ and cloze cards, synced to my homelab with Syncthing.
-
Song guessing game
Play a short clip, and friends race to name the song.
-
Go spike: rate limiter
Token-bucket rate limiting middleware for net/http, written to learn Go concurrency before Catchment.
-
Go spike: SQLite migrations
Versioned schema migrations for SQLite in plain Go, the approach Catchment now uses.
Experience and education
-
BSc Software Engineering · Eduvos
-
Web and security work
- Investigated a compromised WordPress site for a small healthcare practice, finding 23 malicious files across three discovery waves.
- Rebuilt the site as a static Astro site after the clean-up.
Recent writing
All writing-
PortSwigger lab: SQL injection UNION attack, retrieving data from other tables
Working out the column count, finding a text column, and pulling the users table, with the parameterised fix.
-
Adding security scanning to a Go pipeline
govulncheck, gosec and an image scan in GitHub Actions, what each one caught on Catchment, and the false positive I suppressed.
-
Threat modelling a home water system
STRIDE on a system with a borehole pump, two tanks and a Go API, and why the pump relay is the asset that matters most.
-
Catchment phase 1: replacing a handwritten rain log
What I built in phase 1, why it’s plain Go and SQLite, and what the first month of real rain data showed.
-
Anatomy of a compromised WordPress site
Three discovery waves, 23 malicious files and one attacker toolkit, worked through with PICERL.