In my Security Capstone class, I had the opportunity to go through the "Penetration Tester Path" on Hack The Box, a comprehensive learning journey that sharpened my skills in offensive security. Each module provided valuable insights into different aspects of penetration testing. For example, I gained a deeper understanding of exploiting vulnerabilities through the Shells & Payloads and Metasploit Framework modules, where I learned to craft payloads and use automated tools for exploitation. The Password Attacks module taught me various techniques for cracking weak credentials, while the Vulnerability Assessment module emphasized how to identify and assess security weaknesses in systems. The Network Enumeration with NMAP module helped me master network scanning, and Information Gathering Web Edition enhanced my ability to gather crucial details for web application penetration tests. I also strengthened my understanding of the overall penetration testing process, from Footprinting to executing full-scale assessments, by working through modules that simulated real-world scenarios. Each of these modules provided hands-on experience and valuable lessons

Another part of the Security Capstone class, I had the hands-on opportunity to work with new Dell PowerEdge servers, taking part in the entire process from start to finish. We began by building custom server racks and carefully mounting the servers, ensuring each component was properly secured and configured for optimal performance. Once the physical infrastructure was in place, we moved on to installing Proxmox, a powerful open-source virtualization platform. Setting up Proxmox involved configuring storage, networking, and virtual environments, which allowed us to manage and deploy virtual machines seamlessly. I also got the privilege to work with bot palo alto 440's and ubiquiti firewalls.

I also integrated Ansible with Semaphore onto the servers, preparing for future automation tasks. This setup was designed to eventually manage and streamline server configurations, but we specifically focused on using it as a grader for future assignments—enabling automatic updates and management of the system to help with course-related labs. One of the key projects was designing and deploying labs tailored to the courses at Caldwell, creating virtual environments that fit specific learning objectives and provided practical, hands-on experiences for students. Overall, the experience of working with cutting-edge server hardware, mastering virtualization tools, and preparing automation for grading and assignment management gave me invaluable skills in infrastructure setup, automation, and lab design, all of which are essential in the field of cybersecurity and system administration.