Projects

• HTTP

• status codes

• cache-control

The Secret Detective Http Project

Explore how web servers respond to HTTP requests. Learn to read headers, status codes, and analyze cache behavior using only browser tools and online services—no coding required.

• Typescript

• react native

• React Navigation

Movie Catalogue with Zustand

Expand your previous movie catalogue app by adding global state management with Zustand. Implement features for favorites, category filtering, and title search, using selectors and shallow comparison to minimize re-renders.

• Javascript

• HTML and CSS

• accessibility

Interactive Product Landing

Transform your static Product Landing Page into an interactive conversion machine. You'll add dynamic pricing comparison (monthly/annual toggle, quantity sliders), multi-step intelligent forms with validation, FAQ accordion with search, and dynamic testimonial carousel with filters. This project emphasizes advanced prompting, iterative development, state management, and collaborative debugging with AI to create components that increase conversions.

• cybersecurity

• penetration testing

• gobuster

Pentesting Web Reconnaissance Project - The Lovers

In this project, students will perform the web reconnaissance phase on the vulnerable machine The Lovers. The goal is to explore the initial web page, identify the login form, and use tools like Gobuster or Dirb with SecLists to enumerate hidden directories and files. No exploitation will be performed yet; the results will serve as input for later phases.

• linux

• cybersecurity

• blue-team

Metadata Investigation: The Secret of the Mona Lisa

A Linux system has been compromised. Your mission is to investigate a suspicious image, track the attacker, and uncover hidden persistence tasks. Only by cleaning the system correctly will you be able to reconstruct the final flag.

• windows

• cybersecurity

• blue-team

Malware Analysis: Suspicious

You’ve received a suspicious executable. Your task is to decompile it, identify the malicious behavior, and clean the binary. Only by successfully removing the malicious activity will the program execute fully and reveal a message that contains the flag.

• linux

• cybersecurity

• blue-team

SQLite Forensics Recovery

A critical database backup was found damaged. As an analyst, your task is to recover usable data and find the flag.

Building Project Requirements With AI

• Typescript

• react native

• expo

Movie Catalogue

Build a mobile app that lets users explore a movie catalogue, view details, and navigate through different categories using react. Work entirely with local data from data/movies.ts (no APIs, no global state). Perfect to master navigation and parameter typing in React Native.

• Javascript

• Layouts

• HTML and CSS

Product Landing Page with AI

Build a professional landing page to sell a product (mobile app, online course, or physical product) in just 5 minutes using AI. You'll create a complete conversion-focused page with hero section, features, testimonials, pricing, and strategic CTAs. Practice semantic HTML, modern CSS (glassmorphism, animations), JavaScript (dark/light mode with localStorage, scroll animations), responsive design, and accessibility. The project is built from scratch in Cursor using one powerful AI prompt, with optional iterations for personalization.

• cybersecurity

• Nmap

• network-scanning

Pentesting Reconnaissance Project - The Lovers

This project introduces students to the reconnaissance phase on the vulnerable machine The Lovers. Students will discover the target's IP address, scan open ports and services with Nmap, identify the operating system, and confirm the existence of an HTTP service as preparation for further enumeration and exploitation phases.

• wireshark

• network analysis

• pcap

HTTP Traffic Forensics: Red Flag

Analyze a .pcap file containing a suspicious HTTP transaction, find a Base64-encoded string, and decode the flag.

• cybersecurity

• blue-team

• osint

OSINT Tracing: Where Was This Photo Taken?

Analyze a seemingly anonymous photo to determine the city and country where it was taken. Use OSINT techniques to validate the flag.

• reverse-shell

• post-exploitation

• linux

Reverse Shell Cleanup

A Linux server has been compromised and multiple hidden reverse shells were planted. Your job as an analyst is to detect and remove them.

• Typescript

• react native

• React Navigation

Modular Architecture with React Native

Practice modular architecture in a React Native CLI + TypeScript app by restructuring the existing Movie Catalogue into independent features (Movies and Categories). You'll create feature entry points, local Zustand stores, and shared utilities — all with local data and no external APIs.

• Typescript

• hooks

• react native

Daily Mood Tracker with React Native

Build a simple mobile app that lets users record their daily mood (Happy, Neutral, Sad), see the current mood, and browse a recent history. Practice useState for local state, useEffect for lifecycle (no fetch), conditional rendering, and FlatList for performant lists. Perfect for getting started with React Native + TypeScript.

• cybersecurity

• penetration testing

• sql-injection

Pentesting Exploitation Project - The Lovers

In this project, students will perform the exploitation phase on the vulnerable machine The Lovers. The goal is to use the reconnaissance findings to gain access, explore the system, and escalate privileges to full control. Students must include evidence of the exploitation, obtained credentials, exploration findings, escalation techniques, and the discovered flags in their final report.

• windows

• engineering-reverse

• cybersecurity

Final Boss II - Forensic Analysis and Reverse Engineering

An AI startup was compromised overnight. As a forensic analyst, you must reconstruct the incident from collected evidence and recover a hidden password inside a suspicious executable.

• linux

• cybersecurity

• blue-team

Classic Cryptography: Holy Riddle

You’ve recovered a suspicious string. Your goal is to decrypt it using a classic cipher method called Atbash and validate your result using a script. Only if you decrypt it correctly will you receive the final reward.

• linux

• cybersecurity

• blue-team

OSINT Tracing: The John Click Case

A user known as johnclick1337 posted a threat before disappearing. Use OSINT techniques to uncover his email and validate the flag.