Projects

🔐 Admin Dashboard (Private)

I developed and secured private admin dashboards for managing alerts and user data for both stocksviewer.com and stockscryptoalerts.com.

• Flask route protection & session validation
• Separation of public and admin interfaces via Nginx + Gunicorn
• Tailscale-based private access
• Nginx IP filtering
• Firewall & port hardening (UFW)
• Secure password hashing using Argon2
• Session protection with secure cookie settings
• Rate limiting via Flask-Limiter
• Fail2Ban integration for brute-force defense
• HTTPS/TLS enforced on all routes
• Centralized logging & monitoring with Wazuh

🔐 Custom Intrusion Detection & IP Blocking System

Built a custom Flask-based WAF-like intrusion prevention system.

• Brute-force login detection and temporary bans
• Permanent ban escalation on repeated abuse
• reCAPTCHA and password reset abuse detection
• Real-time alerting and admin dashboard visibility
• Logging via ActivityLog, BlockedIP, and SecurityAlert models

🔧 Additional Technologies Used

• CSRFProtect() with Flask-WTF
• JWTManager() for secure sessions
• Flask-Mail for notifications
• CORS configuration for APIs
• PasswordHasher() for Argon2

TryHackMe / Google Cybersecurity Labs

• TryHackMe Learning Path

Google Cybersecurity Path: