Scott Freestone

Cybersecurity & Machine Write-Ups & Web Apps...oh my

Scott Freestone

Cybersecurity student and IT lover working across Window, Linux, scripting, and web security — building the tools I wish I'd had while learning along the way.

  • Linux
  • Python
  • Bash
  • Networking
  • Web Security
  • Flask
  • Node.js
GitHub Get in touch

01 — Open source

Security & Scripting

Scripts, tools, and config files kept on GitHub. Most clone and run out of the box, and are written to be edited for your own setup.

Bash Scripts

Everyday Bash for system maintenance, user creation, and housekeeping. Built to be forked and reshaped.

  • Bash
  • Linux

directoryHunter

Runs GoBuster and Ffuf against a target URL, checking both trailing and leading directories from a chosen wordlist.

  • Shell
  • Recon

setup_conf.sh

One-shot provisioning for fresh Linux machines. Resets a known set of configurations so test boxes start from the same place.

  • Bash
  • Provisioning

Log Analyzer

Scans system logs for failed login attempts, event frequencies, and other signals worth a second look.

  • Python
  • Blue team

confVault

Standalone dotfiles for Bash, tmux, and Zsh. Take what you want, change the rest.

  • Dotfiles
  • tmux
  • Zsh

02 — Writing

Blog & Vulnerable Machine Notes

ctlaltdeceased.com landing page with a terminal-style guest authentication prompt
Blog index listing posts and the What The Hell Is / Deep Dive series
Recent posts feed with a tag filter and tool kit sidebar
Machine Notes index grouped by Hack The Box, OverTheWire, Let's Defend, and picoCTF
Hack The Box Underpass write-up showing numbered enumeration steps and commands
Tools page with cards for Inbox Analyzer, VulnVoyager, Log Analyzer, and Regex Reference

ctlaltdeceased.com

Part CTF notebook, part blog, part toolbox — a personal site built around the process of learning security.

Machine Notes are working notes from vulnerable machines, wargames, and SOC scenarios, not flag dumps. The Blog covers concepts worth writing down, pitched at curious newcomers and practitioners alike. Tools are a collection of utilities that I've built to make my own work easier, and that others may find useful.

A password guards the full site (maybe you can find it), but most of it is out in the open if you try, try again. Expect spoilers — and flags have been changed where noted, so do the work.

Visit the blog

03 — Deployed

Web & Application Work

Full applications running in production, from security tooling to commercial client sites.

VulnVoyager scanner results page

VulnVoyager

A Python vulnerability scanner that rates a site's security posture — HTTP header checks, SSL/TLS validation, secure cookie analysis, and link crawling combined into a single report.

  • Python
  • Flask
  • HTML
  • CSS

Live site

Email Analyzer report showing sender, SPF/DKIM/DMARC, and URL findings

Email Analyzer

Email analysis for .eml and .msg files. Extracts sender details, SPF/DKIM/DMARC records, URLs, and IPs to surface phishing attempts and spoofed senders.

  • Python
  • Flask
  • DNS

Live site Source

Spot Finder skate spot listing page

Spot Finder

Full CRUD app on a MongoDB and Node.js backend where the skateboarding community can add, rate, and discover new spots.

  • JavaScript
  • Node.js
  • MongoDB

Live site

Hufnagle Cello Studio homepage

Hufnagle Cello Studio Client

Active site for a private cello studio, built to drive prospective students toward the contact form. I handle design, updates, maintenance, and hosting.

  • JavaScript
  • HTML
  • CSS

Live site

04 — Hands on

Home Labs

Self-built environments where the theory gets tested.

Segmented VLAN Network

UniFi-based multi-VLAN network with zone-based firewall policy and least-privilege access across Home, IoT, Labs, and Guest. Trunk/access ports (802.1Q), stateful rules, and mDNS reflection for controlled cross-network discovery.

  • UniFi
  • 802.1Q
  • Firewall

Active Directory Lab

VirtualBox Windows domain for practicing user and group management, Group Policy configuration, and domain controller administration.

  • Windows Server
  • GPO

Proxmox Server

Self-hosted Proxmox environment for virtualization, Linux system administration, and network configuration.

  • Proxmox
  • Virtualization

Offensive Security Lab

Kali-based environment for enumeration, privilege escalation, and network exploitation in controlled scenarios — mapping attack paths to sharpen defensive awareness.

  • Kali
  • Enumeration
  • Privesc

05 — Credentials

Education & Certifications

Education

  • BS, Cybersecurity & Information Assurance Western Governors University — currently enrolled
  • BA, Film Columbia College Chicago — 2007

Coursework

  • Modern Python 3 Colt Steele
  • Network Fundamentals David Bombal
  • Secure Linux Networking Sayed Farshid Miri
  • The Complete JavaScript Course Jonas Schmedtmann
  • Applied Linux Command Line & Shell Scripting Sayed Farshid Miri
  • Complete Guide to Bash Shell Scripting Ziyad Yehia

06 — Say hello

Let's talk

Questions, work, or just want to compare CTF notes? My inbox is open.

scott@scottfreestone.com GitHub