GitHub - 221-bashar/221-bashar: Readme

💫 About Me

👋 Hi, I'm Bashar Khatib, a Software Engineering student at the Open University of Israel focused on cloud & runtime security, detection engineering, and systems programming. I like working close to the operating system in C, building practical security tools in Python, and running them in containers. Alongside my degree I'm completing two full-year bootcamps: Cyber Security and DevOps / Backend (through Jan 2027).

🔎 Interests

Cloud & Kubernetes security, runtime threat detection
Systems programming & OS internals (Linux kernel, xv6)
Networking and blue-team / SOC operations
Backend microservices, CI/CD and Linux automation

🧩 Skills

Category	Details
Security & Detection	Rule-based detection logic, Linux auth-log analysis, brute-force & intrusion detection, security event monitoring, SOC & threat-intel fundamentals, web app security & hardening (CSRF, CSP, session security), Active Directory & GPO hardening, AI guardrail testing
Containers & DevOps	Docker, Docker Compose, Kubernetes, Jenkins, CI/CD pipelines, VMware
Operating Systems	Linux administration & automation, process & memory management, system calls, xv6 kernel development, Windows Server 2016, GDB, GCC, Make
Networking	TCP/IP, VLANs, OSPF, NAT, ACLs, network segmentation, Cisco Packet Tracer, CCNA concepts
Languages	Python, Bash / Shell, C (advanced, systems level), Java, SQL, PHP, JavaScript (basic), HTML & CSS
Tools & Data	Git & GitHub, SQL, PostgreSQL, MariaDB, nginx, pytest, ClickUp, VS Code, PyCharm, Eclipse

📚 Currently Learning (through Jan 2027)

☁️ Cloud & DevOps: AWS Cloud, CI/CD, microservices virtualization & deployment, Spring Cloud, configuration management
🔌 Backend: Spring Boot, Spring Security, JPA / Hibernate & Spring Data, Kafka streaming, OpenFeign, Postman & Swagger
🗄️ Data & Workflow: JDBC, MySQL, MongoDB, Jira, Agile
🔐 Certifications: eJPTv2 and CCNA (in progress)

🛠 Projects

🔐 Security & Detection

Hardened Portfolio: basharkhatib.me A live PHP + MariaDB site on a hardened Ubuntu droplet: CSRF tokens, login lockout against brute force, hardened sessions, Content-Security-Policy and HSTS, a least-privilege database user, a firewall and automatic security updates. PHP MariaDB nginx Linux

Log Analysis API: Intrusion Detection Service A containerised REST API that parses Linux auth logs, detects brute-force and intrusion patterns with rule-based anomaly detection, and shows alerts on a web dashboard. Python REST Docker

Linux Auth Log Analyzer A Python tool that parses Linux authentication logs to detect brute-force patterns and flag suspicious user behaviour. Part of a broader cybersecurity mini-projects portfolio. Python

ForgeLab: Active Directory Domain Lab A full AD domain in VMware with Windows Server 2016 and Windows 10 clients: OU design, group permissions, DNS/DHCP, hardened GPOs and security event monitoring from a blue-team perspective. VMware Windows Server

TechNova Windows Server Lab Automated and hardened a Windows Server 2016 environment (AD, DNS, DHCP) with security policies enforced through Group Policy Objects. Windows Server GPO

Cybersecurity Assistant: AI Guardrail Tester Stress-tests a security-focused AI assistant against jailbreaks, social engineering and data-extraction prompts, then implements and evaluates guardrails. Python

⚙️ Systems Programming

xv6 OS Labs: xv6-02 · xv6-03 Extensions to the xv6 Unix-like kernel: process management, new system calls and memory handling. C Linux

Two-Pass Assembler in C Assembler for a custom assembly language with macro preprocessing, symbol tables, instruction encoding and .ob / .ext / .ent output. C GDB

🐧 Linux, Networking & Automation

Northstar Labs Operations Toolkit Shell automation toolkit scripting real Linux operational workflows. Final project of the Linux Fundamentals automation track. Bash

netmon-autotest Test automation suite that simulates network-switch telemetry and runs regression checks with pytest. Python pytest

Enterprise Network Configuration Lab Multi-site enterprise topology with VLAN segmentation, OSPF routing, NAT and ACL-based traffic control. Cisco Packet Tracer

📓 Learning Vaults

cyber-security-vault: notes, scripts and labs from the Cyber Security bootcamp
devops-backend-vault: notes and exercises from the DevOps / Backend bootcamp

🎯 Goals

Grow into a cloud security / detection engineering role
Deploy my detection projects on AWS and Kubernetes
Complete eJPTv2 and CCNA
Build a portfolio that shows real-world skill in security, systems programming, Linux and cloud