Navkirat Wander

A Flask web app for storing and sharing files, built to demonstrate secure-by-default engineering: per-document access control, encryption at rest, and a full audit trail.

• Enforced per-document RBAC by re-checking sharing grants server-side on every request.
• Encrypted every file with Fernet (AES) before it touches disk; plaintext is decrypted only in memory for an authorized download.
• Logged every sensitive action (logins, uploads, downloads, share grants/revokes, access-denied attempts) to an admin-only audit log.

A Flask backend modeling what Demonware builds for Call of Duty at a small scale: a matchmaking queue, skill-based pairing, and an Elo-rated leaderboard.

• Automatic matchmaking sorts the queue by rating and pairs whichever two waiting players have the closest skill gap.
• Ratings update through Elo, the same rating system chess uses, so beating a stronger opponent counts for more than an easy win.
• Covered by a pytest suite that checks the Elo math itself, plus the full queue-to-leaderboard flow.

Applied cyber defence and threat mitigation techniques in a competitive, AI-integrated security environment hosted by UFV and IEEE Vancouver.

• Earned a Certificate of Achievement from UFV and IEEE Vancouver for performance in a live-fire defence scenario.

Active Directory exploitation, SQL injection, and network analysis performed against simulated environments via Hack The Box.

• Captured NTLMv2 hashes via LLMNR/NBT-NS poisoning with Responder in a simulated Windows Active Directory environment.
• Bypassed authentication by exploiting SQL injection vulnerabilities to enumerate backend databases.
• Identified misconfigured FTP, SMB, and HTTP services with Nmap and Gobuster; built proficiency with Redis, MongoDB, and Rsync via OpenVPN-isolated labs.