[{"content":"Starting My CCNA Journey — May 4, 2025 After much planning and contemplation, I’ve officially kicked off my journey toward earning the Cisco Certified Network Associate (CCNA) certification. Networking is a critical pillar of IT and cybersecurity, and I know mastering it will level up my capabilities in meaningful ways.\nIt’s not going to be easy — and that’s exactly why I’m doing it.\nGame Plan For the next couple of months, I’ll be dedicating a few focused hours each day to study, review, and hands-on practice. Here\u0026rsquo;s how I’m structuring my journey:\n1. Core Course I\u0026rsquo;m following the \u0026ldquo;Complete Cisco CCNA 200-301\u0026rdquo; course by David Bombal.\nHis content is top-tier — practical, clear, and regularly updated. It covers everything from basics to advanced topics with labs, quizzes, and challenges.\nMy rule: Don’t move ahead until I’ve truly grasped the current module through repetition and lab practice.\n2. Daily Lab Work Hands-on experience is the foundation of my learning. I’m setting aside time each day to lab out what I learn using:\nCisco Packet Tracer GNS3 (for simulation when needed) Labs provided in Bombal’s course Special focus areas for daily practice:\nSubnetting (mastery is a must) VLANs and Switching concepts Routing protocols (RIP, OSPF, EIGRP) Network security and ACLs 3. Mock Tests \u0026amp; Practice Questions I’ll test myself weekly to measure progress and retention. I’m aiming to simulate the exam environment frequently to build confidence and speed.\nDocumenting the Process I plan to document my journey through blog posts, notes, and study updates. This helps me track progress and may even help someone else in the same boat.\nWhy CCNA? Because it challenges me. Because it’s respected. Because mastering networking makes me better at everything else I want to do in tech — from cybersecurity to cloud engineering.\nIt\u0026rsquo;s not about memorization. It’s about understanding how the internet works at a foundational level. That’s powerful.\nLet’s get it. One subnet, one packet, one lab at a time.\n","permalink":"https://rakshan-k.github.io/posts/ccna-journey/","summary":"\u003ch2 id=\"starting-my-ccna-journey--may-4-2025\"\u003eStarting My CCNA Journey — May 4, 2025\u003c/h2\u003e\n\u003cp\u003eAfter much planning and contemplation, I’ve officially kicked off my journey toward earning the \u003cstrong\u003eCisco Certified Network Associate (CCNA)\u003c/strong\u003e certification. Networking is a critical pillar of IT and cybersecurity, and I know mastering it will level up my capabilities in meaningful ways.\u003c/p\u003e\n\u003cp\u003eIt’s not going to be easy — and that’s exactly why I’m doing it.\u003c/p\u003e\n\u003chr\u003e\n\u003ch2 id=\"game-plan\"\u003eGame Plan\u003c/h2\u003e\n\u003cp\u003eFor the next couple of months, I’ll be dedicating a few focused hours each day to study, review, and hands-on practice. Here\u0026rsquo;s how I’m structuring my journey:\u003c/p\u003e","title":"Starting my CCNA Studies"},{"content":"Wi-Fi Offensive and Defensive Security Toolkit Having dedicated the past year and a half to my final year project, I\u0026rsquo;ve successfully developed a powerful and hands-on Wi-Fi Offensive and Defensive Security Toolkit leveraging the capabilities of Python and Scapy on a Raspberry Pi. This project goes beyond theoretical concepts, providing a practical platform to simulate real-world wireless attacks and implement effective defense mechanisms.\nDesigned as both an educational resource and a robust security auditing tool, this toolkit offers invaluable hands-on experience with the offensive and defensive intricacies of Wi-Fi networks. Whether you\u0026rsquo;re a fellow penetration tester, a cybersecurity student looking to bridge the gap between theory and practice, or a hobbyist eager to explore the depths of wireless security, this project offers a unique and practical learning opportunity.\nIntroduction In today\u0026rsquo;s world, wireless networks remain a primary target for attackers due to inherent vulnerabilities in the Wi-Fi protocol stack. Traditional tools often address either attack or defense — rarely both. This project bridges that gap.\nThe Wi-Fi Offensive and Defensive Security Toolkit is a Raspberry Pi-based solution designed to scan, attack, detect, and defend Wi-Fi networks in real time. Built using Python and Scapy, it provides hands-on insight into wireless attacks and mitigation strategies through a modular, menu-driven interface.\n1. System Overview The toolkit is built around four core modes:\nOffensive Mode: Includes deauthentication, beacon flooding, WPA2 handshake capture, MITM, and DNS spoofing. Defensive Mode: Detects deauth attacks, rogue APs, ARP spoofing, and triggers alerts. War Driving Mode: Logs surrounding APs and performs security audits based on encryption type. Automated Mode: Executes chained attacks autonomously — from scanning to key cracking. All modes are powered by Scapy for raw packet manipulation and Hostapd for fake AP creation. The toolkit also includes a real-time intrusion dashboard hosted on Flask, accessible via browser.\n2. Key Features 🗡️ Offensive Capabilities Deauthentication Attack Beacon Flooding / Fake APs WPA2 Handshake Capture \u0026amp; Cracking ARP Spoofing \u0026amp; DNS Spoofing SSL Stripping \u0026amp; Credential Harvesting 🛡️ Defensive Capabilities Rogue AP Detection Deauth Detection ARP Spoofing Alerts DNS Spoofing Alerts 🔎 Recon \u0026amp; Audit War Driving Module AP Security Score Classification (Open → WPA2-802.11w) GPS Tagging \u0026amp; Signal Strength Filtering 📊 Real-Time Dashboard MongoDB-Backed Dashboard for Defense Toggle and Traffic Analysis Live Monitoring of Wi-Fi Events Control Defensive Mechanisms in Real Time 3. Testing Methodologies 3.1 Unit Testing Each module was tested in isolation:\nPacket Injection Testing: Verified proper crafting of deauth and beacon packets. Handshake Capture: Ensured .cap files were compatible with Aircrack-ng. Fake AP Broadcasts: Confirmed visibility on client devices. Dashboard Logging: Checked accurate and real-time updates. 3.2 Integration Testing All modules were integrated and tested together:\nAutomated Mode Execution: Confirmed smooth transitions across attack stages. Defense Mode: Detected all injected attacks in near real-time. Recon + Audit Workflow: Seamlessly logged APs and calculated scores. 3.3 Performance Testing Measured under varying conditions:\nHandshake Capture Time: 3–7 minutes average (weak passphrases). Deauth Success Rate: 80–90% depending on AP proximity. Dashboard Latency: Alerts showed within 3–5 seconds. Resource Use: CPU/memory remained under 70% on Raspberry Pi 4. 3.4 Security Testing Real-world attacks were simulated:\nMITM + Credential Capture DNS Spoofing with Fake Google Login Resilience Testing with WPA2-802.11w Enabled APs 4. Contributions and Innovations 🔐 Protocol-Level Discovery Attempted to block deauthentication attacks via software filtering, but discovered that 802.11w (Management Frame Protection) was the most reliable solution. The toolkit thus recommends hardened APs using hostapd with WPA2 + 802.11w.\n🧰 Integrated Attack-Defense Framework Unlike other tools, this combines both offensive and defensive modules. Ideal for penetration testers, researchers, and students alike.\n🛰️ Real-Time Intrusion Dashboard Built-in dashboard shows:\nActive attacks Spoofed frames Detected rogue APs Deauth logs and timestamps 🧬 Custom Packet Engineering Every attack is custom-coded in Scapy, unlike tools like aircrack-ng that abstract low-level behavior. This gives fine-grained control for educational purposes.\n🔁 Fully Automated Mode Automatically loops through:\nScan for APs Select weakest one Launch deauth Capture handshake Crack password Log and move to next 5. Results and Analysis 5.1 Handshake Capture \u0026amp; Cracking 85% capture rate across test APs 3–7 mins average cracking time (weak passwords) Strong WPA2 passwords resisted dictionary attacks 5.2 Deauthentication Attacks 90% success in client disconnection Best results within 10 meters 802.11w APs mitigated most attacks 5.3 MITM \u0026amp; ARP Spoofing 100% success on non-802.1X networks Unencrypted traffic yielded credentials Detected within 10 seconds 5.4 DNS Spoofing Successful redirection post-ARP spoofing Harvested credentials via fake Google login Worked only on non-HSTS and HTTP sites 5.5 Rogue AP Detection 100% detection via SSID/MAC mismatch 85% DoS success on fake APs Dashboard flagged excessive beacons in \u0026lt;5s 5.6 Recon \u0026amp; AP Audit Logged 50+ APs in 500m radius Classification accuracy: 95% Open / WEP / Weak WPA2 / WPA2+802.11w 5.7 Defense Mode 98% detection of deauth \u0026amp; ARP spoofing Alerts triggered within 3–5 seconds WPA2-802.11w APs resisted 90% of deauths 5.8 Automated Mode 80% success rate in chained attacks 4–6 minutes/AP on average Skipped failed attempts to optimize workflow Conclusion The Wi-Fi Offensive and Defensive Toolkit is a unique, hands-on solution for learning, testing, and securing Wi-Fi networks. It doesn\u0026rsquo;t just execute attacks — it teaches how they work and how to mitigate them.\nWhether you\u0026rsquo;re a cybersecurity student, a red teamer, or a wireless researcher, this project provides:\nA modular learning environment Practical defense tools Real-world attack simulation Protocol-level insights With growing threats in wireless environments, understanding both sides of the security spectrum is no longer optional — it\u0026rsquo;s essential.\nNext Steps Install script for easy deployment Add support for WPA3 and Evil Twin detection Leave feedback or contribute to future versions! Built with Scapy, Python, Raspberry Pi, and a passion for wireless security.\n","permalink":"https://rakshan-k.github.io/posts/wifi-toolkit/","summary":"\u003ch1 id=\"wi-fi-offensive-and-defensive-security-toolkit\"\u003eWi-Fi Offensive and Defensive Security Toolkit\u003c/h1\u003e\n\u003cp\u003eHaving dedicated the past year and a half to my final year project, I\u0026rsquo;ve successfully developed a powerful and hands-on Wi-Fi Offensive and Defensive Security Toolkit leveraging the capabilities of Python and Scapy on a Raspberry Pi. This project goes beyond theoretical concepts, providing a practical platform to simulate real-world wireless attacks and implement effective defense mechanisms.\u003c/p\u003e\n\u003cp\u003eDesigned as both an educational resource and a robust security auditing tool, this toolkit offers invaluable hands-on experience with the offensive and defensive intricacies of Wi-Fi networks. Whether you\u0026rsquo;re a fellow penetration tester, a cybersecurity student looking to bridge the gap between theory and practice, or a hobbyist eager to explore the depths of wireless security, this project offers a unique and practical learning opportunity.\u003c/p\u003e","title":"Wi-Fi Offensive and Defensive Security Toolkit – Complete Cybersecurity Project"},{"content":"I’m Officially a Red Hat Certified System Administrator (RHCSA)! I am thrilled to announce a major milestone in my Linux journey: I have earned my Red Hat Certified System Administrator (RHCSA) certification! This achievement has been a goal of mine for quite some time, and it reflects my deep passion for Linux, self-learning, and commitment to professional growth.\nThe RHCSA certification is a hands-on, performance-based exam that pushes candidates to demonstrate their knowledge and skills in live, real-world scenarios. It’s designed to validate one’s ability to manage and configure Red Hat systems at a professional level, making it one of the most respected certifications in the industry. This wasn’t just an exam for me; it was a personal challenge to solidify my technical foundation and grow in my career.\nWhat Motivated Me? My love for Linux has always been a driving force. For me, Linux represents freedom, flexibility, and an endless platform for innovation. It powers most of the world’s critical infrastructures and offers boundless opportunities to learn and create. The RHCSA certification was the natural next step to deepen my understanding and capabilities within the Linux ecosystem.\nCertification RHCSA Certification Badge Check out on LinkedIn Exam Objectives View RHCSA Objectives My Learning Journey Preparing for this certification was a rigorous yet rewarding experience, as I opted for a self-study approach using resources from O’Reilly’s course by Sander van Vugt. His material, known for its clarity and real-world applicability, was instrumental in shaping my understanding of Red Hat systems.\nI committed to hours of studying, practicing, and simulating different scenarios, ensuring that every skill I learned would be second nature by exam day. The topics were expansive, requiring not only theoretical knowledge but also practical skills to configure, troubleshoot, and optimize Red Hat systems. By relying solely on self-study, I was able to reinforce my skills, adapt quickly to different environments, and develop a solid command of Red Hat Linux essentials.\nKey Skills Gained and Mastered Achieving the RHCSA was not just about passing an exam but about mastering essential skills required in real-world Linux environments. Here’s an overview of the main areas I focused on:\nSystem Management and Tools: Learned to use Red Hat’s extensive set of system utilities and tools for seamless management and troubleshooting. Command Automation and Shell Scripting: Gained proficiency in shell scripting, enabling me to automate complex tasks, optimize workflows, and minimize manual operations. System Operation and Boot Management: Enhanced my ability to manage system startup, ensure services run efficiently, and control boot processes. Partitioning, Volume, and Storage Management: Worked extensively on creating, configuring, and managing partitions and logical volumes for optimized storage solutions. Networked File Systems and Storage Solutions: Set up and managed network-based file systems, enhancing my understanding of shared storage and distributed environments. System Deployment and Service Management: Deployed systems and managed services, honing skills in service prioritization, configuration, and troubleshooting. Network Configuration and Security Hardening: Configured network settings for secure and efficient data exchange, focusing on implementing firewall rules and network security practices. User and Group Management with Security Best Practices: Managed user permissions, group policies, and enforced best practices for account security and integrity. Comprehensive System Security and SELinux Policies: Worked extensively with SELinux to configure and enforce security policies, ensuring that systems remain secure in diverse environments. Container Management and Integration: Developed a deep understanding of containerization, enabling me to deploy, manage, and integrate containerized applications within Red Hat environments. Why the RHCSA Exam Stands Out The RHCSA certification is unique in its hands-on nature. It doesn\u0026rsquo;t rely on multiple-choice questions but tests the candidate’s ability to perform critical tasks in a live Red Hat environment. This approach emphasizes real-world skills over theoretical knowledge and validates that configurations are persistent across reboots. For those passionate about Linux, it’s an ideal way to demonstrate one’s ability to handle challenges in enterprise environments and production-ready systems.\nAcknowledgments and Thanks This journey wouldn’t have been possible without the support of several people and resources. I would like to express my deepest gratitude to my mentor, Deepan Barathi, for his guidance and insights that motivated me throughout the preparation process. A big thank you also goes to Advantage Pro for their help in arranging the exam logistics smoothly.\nResources That Made a Difference A special mention goes to O’Reilly and Sander van Vugt’s course materials, which provided a thorough understanding of each RHCSA objective and helped me gain hands-on experience through practical exercises. For anyone interested in preparing for RHCSA, I highly recommend this course for its comprehensive coverage and in-depth explanations.\nThis certification marks a significant step forward in my career, and I look forward to applying these skills in future projects and environments. Earning the RHCSA has reinforced my passion for Linux and equipped me with practical tools to tackle real-world challenges in system administration.\nIf you’re on your own path to the RHCSA or a similar certification, my advice is to embrace the process, invest in the practice, and enjoy the journey of discovery. Here’s to more learning and growth in the exciting world of Linux! 💻🐧\n","permalink":"https://rakshan-k.github.io/posts/rhcsa/","summary":"\u003ch1 id=\"im-officially-a-red-hat-certified-system-administrator-rhcsa\"\u003eI’m Officially a Red Hat Certified System Administrator (RHCSA)!\u003c/h1\u003e\n\u003cp\u003eI am thrilled to announce a major milestone in my Linux journey: I have earned my \u003cstrong\u003eRed Hat Certified System Administrator (RHCSA)\u003c/strong\u003e certification! This achievement has been a goal of mine for quite some time, and it reflects my deep passion for Linux, self-learning, and commitment to professional growth.\u003c/p\u003e\n\u003cp\u003eThe \u003cstrong\u003eRHCSA\u003c/strong\u003e certification is a hands-on, performance-based exam that pushes candidates to demonstrate their knowledge and skills in live, real-world scenarios. It’s designed to validate one’s ability to manage and configure Red Hat systems at a professional level, making it one of the most respected certifications in the industry. This wasn’t just an exam for me; it was a personal challenge to solidify my technical foundation and grow in my career.\u003c/p\u003e","title":"Got my RHCSA"}]