In collaboration with my group mates, I worked on a thorough analysis of a client's problem regarding the management of employees within a household setting.

Our team was responsible for creating several key architectural and design artifacts to propose a comprehensive website solution:

• Use Case Diagram: Mapped out all user interactions and system requirements.
• Data Model: Designed a structured database schema to handle employee records, tasks, and scheduling.
• Figma Design: Created a high-fidelity interactive prototype to visualize the user interface and experience.

Note: This is an ongoing project.

As part of a development team, I am working on a full-stack, dynamic web application for gym management utilizing the TALL stack, with a heavy focus on Laravel Livewire.

By using Livewire, our team is creating a reactive, modern interface. My current contributions and project features include:

• Real-time Components: Developing membership sign-ups and seemless payment systems.
• Backend Integration: Implementing robust server-side logic through Laravel controllers and models.
• Reactive UI: Building seamless user interactions to provide a "single-page app" feel.

Together with my group mates, we made a system where you can show a quiz on a website inspired by Kahoot. This can then be answered in real-time via an answering device controlled by an OrangePi 3. At the end of the quiz, a scoreboard is shown with the points. All necessary data is stored in a SQLite database. On the website, you can show, create, or change a quiz. These details are then added/modified in the database.

I was responsible for the operation of the API and webhooks in Node.JS to ensure that all data could be sent correctly between the Pi, the frontend, and the database.

I learned a lot during this project, such as working in an agile work form with teammates, but also certainly about the operation of webhooks and APIs in Node.JS because we saw APIs in Python FastAPI during the lessons.

For Project Hosting, we created our own hosting platform where users can upload files for a website that is automatically set up.

Our goal was to create the most efficient platform possible for individuals to host their website cheaply.
We helped set up a datacenter ourselves where we could use three servers using VMWare vSphere and ESXI hosts.
On this server, we had a database, FTP server, and a SIEM server to protect ourselves and the customers.
Authentik was used to authenticate users, after which users could manually add files.

The final result was a web hosting platform where users could authenticate themselves, after which they could upload the files for the website. After this, a virtual host was created on a virtual machine with Apache for the customer, and the website was automatically made available with the correct files.

I was mainly responsible for helping to set up the servers and the configuration as well as setting up the Authentik platform for authorization.

For the Application Security course, we did a mock pentest. Every student received a personal webshop website with vulnerabilities to search for and report.

To start, I began searching for vulnerabilities from the OWASP top 10. I tested both manually and used automatic tools.
With sqlmap I found a first alert which I then checked manually. The product page was vulnerable to SQL injection, allowing me to access sensitive data such as users and passwords.
The webshop also had an unsecured admin page, so everyone logged in or not could access the admin page. On the page, you could create an admin account for yourself and very quickly have full admin access to the webshop.
The last vulnerability I found was reflected cross-site scripting in the contact form on the contact page. The contact form is not sanitized, so javascript can be executed.

Afterwards, I had to fill everything in a pentest report with step-by-step proof and recommendations to solve the weaknesses.
This was a fun and educational project because it simulated a real situation. I learned to work step-by-step, note well what has already been tested, and use automatic pentest tools.

Show report