Skip to content
View eniat's full-sized avatar
2 followers · 3 following

Block or report eniat

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
eniat/README.md

Hi, I'm Taine

“The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards - and even then I have my doubts.” - Gene Spafford

I build security tools that actually work end-to-end - scanners that scan, detection systems that detect, attacks that actually break things.

Pinned

fuzzer - crawls a target, fuzzes every endpoint it finds, flags SQLi/XSS/path traversal, and uses an LLM to cut noise out of the wordlist.

attack-detection-and-response - a SOC platform that catches password spray, impossible travel, and MFA fatigue, then maps the response to MITRE ATT&CK.

ics-attack-detection - simulated a nuclear power plant's control system, launched stealthy false data injection attacks against it, then built and compared three detection methods to catch them.

secure-distributed-system - a cryptographic voting system (ECDSA, RSA-OAEP, Shamir's Secret Sharing) with a full threat model and attack case study.

cybersecurity-data-analysis - CVE risk analysis across UK sectors using CVSS/EPSS scoring, clustering, and co-occurrence analysis.

secure-ai - offense against both generations of ML: poisoning and evasion attacks on a CNN, prompt injection against an LLM.

Also here

Distributed systems (gRPC/RMI auction platform), applied cryptography, network protocol implementations (P4 NAT/PAT, multithreaded traceroute, web proxy), and a handful of algorithms and database projects.

Pinned Loading

  1. fuzzer fuzzer Public

    Web application fuzzing toolkit for authorised security testing. Static and dynamic crawlers feed focused fuzzers for path traversal, XSS (reflected, stored and DOM) and SQL injection (error, conte…

    Python

  2. attack-detection-and-response attack-detection-and-response Public

    SOC platform that ingests Entra ID sign-in and audit logs and detects password spray, brute force, impossible travel, MFA fatigue, suspicious OAuth consent and mailbox forwarding. Groups alerts int…

    Python

  3. secure-distributed-system secure-distributed-system Public

    Secure electronic voting system built on ECDSA signatures, RSA-OAEP encrypted ballots and Shamir's Secret Sharing for threshold key recovery. Includes role-based authentication, a full threat model…

    Python

  4. cybersecurity-data-analysis cybersecurity-data-analysis Public

    Vulnerability risk prioritisation across six UK sectors and fifty organisations. Enriches CVE data with CVSS, EPSS, KEV status and patch availability, then applies clustering and co-occurrence anal…

    Jupyter Notebook

  5. secure-ai secure-ai Public

    Offensive security against two generations of ML. Poisoning and evasion attacks on a CNN face classifier trained on LFW, then prompt injection against a tool-using LLM to extract system prompts and…

    Jupyter Notebook

  6. ics-attack-detection ics-attack-detection Public

    Cyber-physical security experiment against a simulated nuclear plant steam generator. Implements a stealthy false data injection attack that evades reactor trip thresholds, then builds and compares…

    Python