Freelancers using Security OnionFreelancers using Security Onion
ProjectsPeople
Stephen Kisong'e's avatar
Stephen Kisong'e
Nairobi, Kenya
Cyber Security Analyst
Cyber Security Analyst
Cover image for Designed and documented a secure
Designed and documented a secure environment for running Robin, an AI-powered dark web OSINT tool, inside a compartmentalized Qubes OS and Qubes-Whonix setup. The environment was structured to separate research activity, Tor-routed traffic, sensitive credentials, untrusted content, and final reporting. Robin was deployed through Docker inside a dedicated research qube, with traffic routed through sys-whonix and sensitive notes stored separately in an offline vault qube. Disposable qubes were incorporated for opening potentially unsafe links and files. The setup was built around security by compartmentalization rather than relying on a single tool for protection. Particular attention was given to Docker mount restrictions, credential hygiene, network-boundary verification, lawful research scope, and keeping raw research data isolated from personal or client environments. The final result was a repeatable AI-assisted OSINT workflow that supports faster search refinement, result filtering, investigation summarization, and structured reporting while maintaining stronger operational security and clearer separation between collection, analysis, and final output.
0
265
Cover image for This project demonstrates the process
This project demonstrates the process of bypassing AI safety alignment (guardrails) to create a localized, uncensored Large Language Model (LLM) specifically for cyber security red-teaming and research. By utilizing Directional Ablation (Abliteration), we successfully stripped the refusal mechanisms from a state-of-the-art model, quantized it for consumer hardware, and demonstrated its ability to execute a direct cybersecurity prompt (a TCP port scanner) without triggering safety blocks. 🎯 Objective The primary goal was to prove how easily safety guardrails can be manipulated when a user has local access to model weights. We aimed to: 1. Remove the safety alignment from Qwen/Qwen3.5-4B. 2. Retain the model's core reasoning and coding capabilities (minimizing "brain damage"). 3. Compress the model to run efficiently on a consumer-grade GPU. 4. Execute a prompt that standard aligned models refuse to answer.
0
29
Cover image for AI-Assisted CTF Solving and Bug
AI-Assisted CTF Solving and Bug Bounty Hunting I integrated Cyber-Ornith Obliterated, an uncensored cybersecurity model running locally in LM Studio, with HexStrike AI through MCP to execute tools on Kali Linux. I demonstrated the setup by solving Root-Me’s HTML source-code CTF challenge. The model retrieved the page, inspected its HTML and identified a password exposed in a comment. I verified the command output and submitted the answer, successfully completing the challenge. Beyond CTFs, I built this project to support AI-assisted bug bounty hunting, including web response analysis and vulnerability investigation within authorized scope, with human oversight and verification of findings.
2
0
150
Cover image for AI Agent Hacking & Security
AI Agent Hacking & Security Testing Explored how an AI agent can be manipulated through adversarial interactions, with a focus on AI agent hacking, prompt injection, sensitive data exposure, and unsafe agent behavior. The lab uses an AI agent connected to controlled internal data and tools, creating a realistic environment for testing how the agent responds when an attacker attempts to bypass its instructions, access information it should not reveal, or influence how it uses its capabilities. The assessment demonstrates the practical attack surface of modern AI agents and how seemingly simple interactions can become security issues when an agent has access to sensitive data or external capabilities. The testing was performed against fictional data in an isolated environment for authorized security research.
0
53
Security Onion(1)
Arshiya S.'s avatar
Arshiya S.
Mumbai, India
Cybersecurity Content & Cloud Solutions Expert
Cybersecurity Content & Cloud Solutions Expert
Cover image for Cybersecurity Consulting for Social Media Agency
Cybersecurity Consulting for Social Media Agency
0
4
Cover image for Cybersecurity Blog's & Whitepaper for Industry Awareness
Cybersecurity Blog's & Whitepaper for Industry Awareness
0
4
Cover image for Implementation & Internal Audit of AWS Cloud
Implementation & Internal Audit of AWS Cloud
0
7
Placeholder project card media
View more →
Security Onion(1)
ibukun Babalola's avatar
ibukun Babalola
Lagos, Nigeria
SOC Analyst |M365 · SIEM · Security Engineer · AI Automation
SOC Analyst |M365 · SIEM · Security Engineer · AI Automation
Cover image for Built a complete enterprise-grade SOC
Built a complete enterprise-grade SOC environment from scratch: featuring Wazuh SIEM with custom detection rules, Security Onion with Suricata IDS/IPS and Zeek network monitoring, Active Directory with advanced security logging via Group Policy, and Windows Server with Sysmon telemetry. Designed and executed MITRE ATT&CK-aligned attack simulations from Kali Linux and validated detection coverage through red team exercises. Achieved over 95% detection rate across all tested techniques and tactics. This project served as the foundation for understanding how detection engineering decisions translate into real gaps and how to close them.
1
0
43
Cover image for Performed a read-only Microsoft 365
Performed a read-only Microsoft 365 security assessment for an 11-user UK logistics company, uncovering two Critical findings: MFA disabled on Global Administrator accounts and an active email forwarding rule on the Finance Manager's mailbox consistent with Business Email Compromise. Delivered a clear priority action plan, all remediable within 72 hours using tools already included in the client's existing M365 licence along with SharePoint sharing controls and Conditional Access policy configuration to close legacy authentication gaps.
0
46
Cover image for Conducted a full cybersecurity risk
Conducted a full cybersecurity risk assessment for NexaSoft's AWS EKS-hosted Employee Self-Service HR Portal, processing sensitive employee PII including payroll, health records, and government-issued ID. Identified three Critical and five High risks across Azure AD SSO, cloud IAM configuration, and insider privilege controls, aligned to ISO 27001. Delivered a prioritised 90-day remediation roadmap using native AWS and Azure tooling, reducing all Critical risks before go-live and supporting the client's ongoing ISO 27001 certification obligations under Australia's Privacy Act 1988.
0
40
Cover image for Delivered a GRC-aligned cybersecurity risk
Delivered a GRC-aligned cybersecurity risk assessment for an Azure-hosted AI-Driven HR Analytics Service processing employee PII and behavioural data. This engagement went beyond conventional security reviews to address AI-specific risks including data poisoning and model bias that carry direct legal exposure under the Canadian Human Rights Act and the proposed AI and Data Act (AIDA). Identified five High risks and produced a mitigation strategy using Azure-native controls, alongside governance recommendations to ensure compliant and auditable AI decision-making ahead of AIDA enforcement.
0
47
Security Onion(1)
satter ahmed's avatar
satter ahmed
Chattogram, Bangladesh
DNS Architect & Cyber Security Specialist
New to Contra
DNS Architect & Cyber Security Specialist
Cover image for Zero-Knowledge DNS Shielding & Attacker
Zero-Knowledge DNS Shielding & Attacker Deception Matrix
0
53
Cover image for Just started a new task on GitHub for location filtering. It...
Just started a new task on GitHub for location filtering. It feels great to set up backend systems by mixing small logic and patterns. The ultimate goal is continuous learning and improving the project quality. If you have any questions about cyber security or custom scripts you can visit my profile or inbox me directly. Thank you everyone. #GitHub #Coding #Regex #Cybersecurity #ProblemSolving
0
36
Cover image for Just started a new task
Just started a new task on GitHub for location filtering. It feels great to set up backend systems by mixing small logic and patterns. The ultimate goal is continuous learning and improving the project quality. If you have any questions about cyber security or custom scripts you can visit my profile or inbox me directly. Thank you everyone. #GitHub #Coding #Regex #Cybersecurity #ProblemSolving
0
27
Cover image for Network Security Consultation
Network Security Consultation
1
144
Security Onion(1)
Pavlo Krasnytsia's avatar
Pavlo Krasnytsia
Lviv, 79000
Tech Leader | AI, Blockchain & Technology Architect
    8
    Followers
Tech Leader | AI, Blockchain & Technology Architect
Cover image for Built a secure key management
Built a secure key management and programmable policy platform for Web3 infrastructure, enabling teams to enforce transaction rules, automate approval logic, and protect sensitive signing workflows using hardware-backed controls. This project signals senior-level expertise in security architecture, backend systems, and blockchain operations.
1
255
Cover image for Botpress | The Complete AI Agent Platform
Botpress | The Complete AI Agent Platform
1
18
Cover image for Developed a risk intelligence and
Developed a risk intelligence and simulation platform for DeFi protocols that helps teams model exposure, optimize parameters, monitor solvency, and respond to market stress in real time. The project demonstrates advanced quantitative systems thinking, protocol analytics, and robust dashboard-driven product engineering.
1
257
Cover image for Created a real-time blockchain data
Created a real-time blockchain data platform that streams on-chain data into developer and analytics workflows with low-latency pipelines, indexing, and database delivery. This project showcases strong full-stack architecture, data engineering, and blockchain infrastructure capabilities for modern financial applications.
1
237
Security Onion(1)