marti7m5@homelab:~$ whoami

MICHAEL MARTINA // CYBERSECURITY GRADUATE

OFFENSIVE SECURITY_

Cybersecurity graduate focused on offensive security and red team. I build, attack, monitor, and secure systems in a self-hosted cyber range designed for hands-on security research.

OFFENSIVE SECURITY RED TEAM SECURITY ENGINEERING INFRASTRUCTURE

Enter Cyber Range ↓ View Operations ↓ GitHub ↗

marti7m5@ubuntu-vm — bash

$ ./initialize_lab.sh

[+] Loading virtualization ........ READY

[+] Establishing secure network ... READY

[+] Loading cyber range ........... READY

[+] Loading projects ............. READY

operator marti7m5

hypervisor Proxmox VE

compute Ryzen 9 3900X

environment CYBER RANGE

status CONFIGURED

CPU Ryzen 9 3900X 12 Cores / 24 Threads

MEMORY 32 GB DDR4 4 × 8 GB / 3200

STORAGE 2× NVMe 980 Pro + Intel 660p

GPU RTX 2070 NVIDIA

PLATFORM Proxmox VE Virtualization

OPERATOR PROFILE // 00

Cybersecurity graduate.
Offensive security focus.

EDUCATION B.S. Cybersecurity University of Cincinnati

FOCUS Offensive Security Red Team / Security Engineering

CERTIFICATION CompTIA Network+ Networking Foundation

ENVIRONMENT Self-Hosted Lab Windows / Linux / Docker

marti7m5@homelab:~$ ls /infrastructure

01 // INFRASTRUCTURE

Systems behind the range.

The physical and virtual infrastructure supporting security labs, private services, remote administration, and development.

HV-01 CONFIGURED

Proxmox VE

Bare-metal hypervisor hosting Windows and Linux systems used throughout the cyber range.

KVM VMs Linux

CTR-01 CONFIGURED

Docker

Container platform running self-hosted applications, development workloads, and supporting services.

Compose Containers Linux

NET-01 CONFIGURED

Tailscale

Encrypted mesh networking keeps administrative interfaces private while providing remote access to trusted devices.

WireGuard VPN Remote Access

EDGE-01 CONFIGURED

Cloudflare

DNS and edge infrastructure supporting the public-facing portions of the mamartina.com environment.

DNS TLS Edge

SYSTEM TOPOLOGY

Virtualization platform

LAB ENVIRONMENT

PHYSICAL HOST PROXMOX VE Ryzen 9 3900X / 32 GB DDR4 / RTX 2070

VM DC01 Windows Server

VM WS01 Windows 11

VM Ubuntu Server Docker Host

VM Kali Linux Security Workstation

ACCESS ARCHITECTURE

Public edge. Private administration.

SEGREGATED ACCESS

EXTERNAL Internet

PUBLIC PATH

EDGE Cloudflare

↓

PUBLIC Web Services

PRIVATE PATH

VPN Tailscale

↓

ADMIN Management

↓

CORE Proxmox / Ubuntu

marti7m5@homelab:~$ ./launch-cyber-range

02 // CYBER RANGE

Attack. Observe. Understand.

A controlled Windows domain environment for practicing reconnaissance, enumeration, attack simulation, endpoint monitoring, and defensive analysis.

LAB ATTACK PATH

Active Directory environment

ISOLATED LAB

LINUX ATTACKER

Kali Linux

Offensive security workstation used for reconnaissance, enumeration, and controlled attack simulation.

Nmap Nikto Gobuster

RECON / ENUM

WINDOWS 11 ENDPOINT

WS01

Domain-joined Windows workstation providing endpoint telemetry and a realistic domain target.

Domain Joined Sysmon

AD ENUM / PRIV ESC

WINDOWS SERVER DOMAIN

DC01

Active Directory Domain Controller providing centralized identity, authentication, DNS, and domain services.

AD DS DNS Windows Server

LAB TOOLING

Nmap SMB SSH Active Directory Sysmon MITRE ATT&CK Windows Event Logs

marti7m5@homelab:~$ cat operations.log

03 // SECURITY OPERATIONS

Hands-on security projects.

Documented labs covering offensive security, Active Directory, network penetration testing, monitoring, and threat detection.

OPERATION // 001 DOCUMENTED

OFFENSIVE SECURITY

Active Directory Attack Lab

Simulated attacks against a Windows domain environment, including Active Directory enumeration and privilege escalation techniques.

OPERATION // 002 DOCUMENTED

PENETRATION TESTING

Network Penetration Test

Network reconnaissance, service enumeration, vulnerability discovery, and assessment of exposed services.

OPERATION // 003 MONITORING

BLUE TEAM

Security Monitoring & Log Analysis

SIEM-based investigation of authentication activity, privilege escalation, endpoint events, and security telemetry.

OPERATION // 004 DETECTION

DETECTION ENGINEERING

Log Parsing & Threat Detection

Python tooling for parsing Linux authentication logs and identifying failed logins, sudo activity, and suspicious authentication events.

marti7m5@ubuntu-vm:~$ docker ps

04 // SELF-HOSTED SERVICES

Infrastructure I operate.

Applications deployed and maintained within the homelab. Administrative interfaces remain on private access paths.

DEPLOYED SERVICES ubuntu-vm

SERVICE FUNCTION PLATFORM STATE

Vaultwarden Password Management Docker DEPLOYED

Nextcloud Private Cloud & Storage Docker / AIO DEPLOYED

Jellyfin Media Server Docker DEPLOYED

Uptime Kuma Service Monitoring Docker DEPLOYED

Nginx Proxy Manager Reverse Proxy & TLS Docker DEPLOYED

Dockge Compose Stack Management Docker DEPLOYED

Gluetun VPN Gateway Docker DEPLOYED

Minecraft Modded Game Server Linux DEPLOYED

marti7m5@ubuntu-vm:~$ cd /opt/stacks/job-copilot

05 // DEVELOPMENT

Software built on the lab.

Custom software developed, containerized, and deployed on the same infrastructure.

FEATURED DEVELOPMENT PROJECT

Job Copilot

A self-hosted job matching and application management platform built around automated lead ingestion, job enrichment, qualification analysis, resume management, and application workflow.

Outlook ingestion Microsoft Graph job-alert processing and provider parsing.

Job enrichment ATS extraction and hybrid description enrichment.

Qualification scoring Skills, education, experience, certification, clearance, and location analysis.

Resume workflow Resume selection, skill extraction, and deterministic tailoring.

React TypeScript FastAPI Python SQLAlchemy Alembic Docker Nginx

View Repository ↗

APPLICATION ARCHITECTURE

FRONTEND React + TypeScript Vite / Nginx

↓

API FastAPI Python

↓

DATA SQLAlchemy SQLite / Alembic

↓

DEPLOYMENT Docker Compose Ubuntu Server

$ /opt/stacks/job-copilot