Inspectable work / local downloads
Source & downloads
The complete portfolio source includes the static website, documentation, project utilities and all 30 guided security exercises: 26 offline foundations and four hands-on workflows. Supplied records and packet fixtures are fictional; personal tool evidence must be collected separately. Independent completion of unfamiliar variants has not yet been assessed.
409 files · 1,501,213 bytes · Standard-library Python utilities
Archive integrity and contents
The ZIP contains docs/, labs/, scripts/, src/, tests/, tools/ and the project README and configuration. Generated runs, local credentials, private notes, receipts and version history are excluded. Upstream attribution remains in the source.
SHA-256 checks file identity; it does not assess the exercises or the learner.
eed74c602ebd1d92379983e080e16e36a1ded1e007996fe80d04d6951b822e51
Run it locally
Extract the whole archive so the labs retain their shared modules. The exercises require Python 3.10 or later. The website build requires a current Node.js release. The hands-on labs also need the separate security tools and local environment described in each README. Read the root README.md and the chosen lab's README before running commands.
python -m zipfile -e jeremy-bryant-portfolio.zip .
cd jeremy-bryant-pages
node scripts/build.mjs
The website build writes a local dist/ folder. It does not publish a site or connect to a lab target.
Read a lab before downloading
30 exercises · Instructions and practice documents
- Offline object-store access review
- Alert deduplication and correlation
- Asset discovery and inventory
- Backup scope, freshness and synthetic restore verification
- Burp practice: whose order is this?
- Build a cloud audit evidence timeline
- Trace a storage exposure path
- Triage a fictional software inventory and advisory ranges
- DNS triage: a small offline packet puzzle
- Email identity and message triage
- Endpoint process context triage
- Offline file integrity and change triage
- Offline firewall rule review
- HTTP headers and cookies
- HTTP access-log triage: original guided practice
- Reconcile joiner, mover and leaver access
- Linux mode bits and directory traversal
- Login triage: original guided practice
- Review MFA and recovery controls by account type
- Scheduled task change review
- Trace dummy secret exposure through config, diffs and logs
- Test a small Snort rule
- Small SSH server configuration review
- TCP handshake investigation
- Timeline normalisation and uncertainty
- TLS certificate review
- Capture traffic you generated
- Vulnerability prioritisation
- Remediation and retesting
- Windows process evidence: from a VM to an explanation