Vency Khunt

Goal: Assess the cyber risk of an Australian not-for-profit that helps vulnerable people into home ownership, and hold some of the most sensitive client data an organisation can.

Approach:

• Used OSINT and external research to understand the organisation's public-facing security exposure.
• Spoke with stakeholders about areas including access control, backups, endpoint security and third-party risks.
• Assessed the identified risks based on their likelihood and potential impact, then created a prioritised action plan.

Result: Delivered findings directly to the founder and board chair level stakeholder. I authored the Information Security Policy, covering areas such as incident reporting, remote work, BYOD, vendors and data security..

Goal: Assess My1Health's environment for exploitable vulnerabilities and deliver a prioritised remediation plan for the engineering team.

Approach:

• Scanned 5 web applications and 3 public IP addresses using Nmap, Shodan, Nessus and OWASP ZAP.
• Ran OWASP ZAP against the web application to test for common vulnerability classes.
• Analysed findings against the OWASP Top 10 and rated their severity.

Result: Identified 3 Medium-rated weaknesses across 2 servers (missing clickjacking protection, an untrusted self-signed SSL certificate and a missing Content Security Policy) and delivered a report with a specific fix for each.

Goal: Manage a simulated ransomware incident and trace the initial point of compromise.

Approach:

• Analysed network traffic using Wireshark, Zeek and tcpdump to follow the attack from the initial phishing email through to internal scanning, SMB activity and ransomware.
• Investigated DNS traffic to find suspicious communication with the attacker's infrastructure.
• Collected and organised indicators such as domains, IP addresses, ports and malicious files to help identify the affected systems.

Result: Identified "patient zero" via phishing indicators, authored a full IR and Forensic Analysis Report, and developed enterprise-ready playbooks for Ransomware, Phishing, and Insider Threat scenarios.