Project
Pentest Lab
Wireless and network security dashboard for an isolated lab, with a server-enforced scope allowlist and the actuator held behind an mTLS relay so it can only ever act inside the lab.
Stack
Python · FastAPI · React + Vite · PostgreSQL · InfluxDB
Notable engineering
- Scope is enforced on the server against an allowlist. A client cannot request a target outside the lab, because the decision is not the client's to make.
- The component that acts runs on an isolated lab host behind an mTLS relay, structurally separated from the console that displays results.
- Its own datastores and credentials, deliberately sharing none of the main platform's identity plumbing.
Source withheld. Withheld. It is tooling for an isolated security lab, and its data model is addresses and hardware identifiers, so the source is largely inseparable from the environment it was built to test.