Hello, my name is Rawad Raool.

• Education: Cybersecurity Student | University of Aden.

• Goal: Learning to build resilient and secure infrastructures and auditing code for vulnerabilities.

• Network Security Lab: Deployed a pfSense firewall to segment local networks using VLANs.

• SIEM Integration: Configured Syslog to export firewall logs to Splunk for real-time traffic analysis.

• Traffic Routing: Implemented VPN tunnels and NAT policies to secure sensitive devices.

• Intrusion Prevention: Fine-tuned IPS/IDS (Suricata/Snort) rules to detect malicious signatures.

PHP backends && Plugins

Security research, source code review, and proof-of-concept development for PHP plugin vulnerabilities.

Application Layer Defense (WAF)

To provide multi-layered security, I focus on implementing Web Application Firewalls (WAF) to filter and monitor HTTP traffic between a web application and the Internet.

• DDoS Mitigation: Using Cloudflare to absorb large-scale volumetric attacks before they reach my origin server

• Global CDN: Speeding up content delivery while hiding the origin IP address of the server behind the pfSense gateway.

• Custom Firewall Rules: Blocking traffic based on Country (Geo-blocking) or specific User-Agents.

• Deep Packet Inspection: Implementing ModSecurity as an engine for Apache/Nginx to act as a host-based WAF

• OWASP Core Rule Set (CRS): Utilizing pre-configured rules to protect against the "OWASP Top 10" vulnerabilities, such as:

    • SQL Injection (SQLi)
  
    • Cross-Site Scripting (XSS)
  
    • Local File Inclusion (LFI)
  
    • PHP Object Injection (POI)
  

Apache or Ngnix web server

protect against weak configurations, and implement access control and permissions policies.

For vulnerability research, I follow the OWASP Top 10 standards to identify and mitigate PHP security risks.

Development

Cybersecurity

Systems