Skip to content
View wonderwaffol's full-sized avatar

Highlights

  • Pro

Block or report wonderwaffol

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
wonderwaffol/README.md

Hi, I'm WonderWaffol 👋

Cybersecurity graduate focused on hands-on security investigations and continuous learning.

My interests include:

  • Security Operations and Incident Response
  • Vulnerability Management
  • Identity and Access Management
  • Web Application Security
  • Digital Forensics
  • Threat Intelligence
  • Junior Penetration Testing

Hands-On Experience

I have practiced cybersecurity through CTFs, investigation challenges, independent labs, and security training platforms.

Tools: Nmap, Wireshark, Burp Suite, OpenVAS, Metasploit, Keycloak, Gobuster, Linux CLI, Python, Azure CLI, curl, netcat, jq, and chisel

Techniques: Enumeration, packet and log analysis, directory discovery, authentication and authorization testing, IDOR/BOLA analysis, privilege escalation, pivoting, metadata analysis, and forensic artifact examination

Current Project

I am developing a Django-based healthcare staffing management system for a small business. The application includes role-based authorization, Django authentication, server-side validation, controlled file uploads, and multi-stage workflows for shift applications, assignments, and timesheet verification.

My work includes implementing features, testing authorization boundaries, documenting security controls, and debugging workflow edge cases.

CTF Portfolio

I am currently organizing my completed CTFs into a technical portfolio that documents:

  • What I observed
  • How I investigated each challenge
  • Why I chose each step
  • What security findings I identified
  • How the work relates to real cybersecurity responsibilities

Write-ups are reviewed for event disclosure rules and sanitized before publication.

Training Profiles

Connect

Popular repositories Loading

  1. wonderwaffol wonderwaffol Public

    Cybersecurity portfolio and hands-on learning journey

  2. cybersecurity-ctf-portfolio cybersecurity-ctf-portfolio Public

    Sanitized technical write-ups from completed cybersecurity CTFs and hands-on challenges