Skip to content
View joaovpzdev's full-sized avatar
19 followers · 19 following

Achievements

Achievement: YOLO

Achievements

Achievement: YOLO

Block or report joaovpzdev

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
joaovpzdev/README.md

Climbing

João Victor Paixão Zolim | Cyber Security

SOC · Pentest · Ethical Hacker (Cisco) · Oracle Cloud Infrastructure Foundations Associate

I'm changing careers into Information Security. Before this, I was a military firefighter, a reconditioning mechanic, and a welder, and I bring the discipline, the calm under pressure, and the habit of solving problems hands-on from those fields. I learn by building: every project below started as a question I wanted to answer with a working lab.

Featured Projects

Blue Team: monitoring, detection, and response

Project What it does Stack
zabbix-security-monitoring Security observation lab on a Windows host. Detects failed logins (Event ID 4625), newly installed services (7045), and Windows Defender being disabled, with email alerts. Includes documented troubleshooting. Zabbix 7.0, Docker, MySQL, PowerShell
sec-dash-zabbix Dashboard that consumes the Zabbix API and shows the last 24 hours of alerts with severity charts. Python, Flask, Chart.js
soar-triagem Receives SIEM alerts via webhook, enriches the IP with AbuseIPDB, and escalates to Slack according to risk. Python, Flask, Redis, SQLite, Docker Compose
checklist-hardening Read-only audit of SSH, firewall, updates, and accounts without passwords, with a PASS/WARN/FAIL report. Bash, Linux
leak-monitor Checks emails against data breach databases and alerts only on new leaks. Node.js, cron, Slack/Discord

Red Team: reconnaissance, OSINT, and findings management

Project What it does Stack
pentest-findings-dash Pentest findings management: imports Nmap, Nuclei, and Burp Suite output, deduplicates re-imports, and tracks remediation. Node.js, React, PostgreSQL, Prisma
visual-recon Captures a screenshot, title, and technologies for each host and builds an HTML gallery for visual triage. Node.js, Headless Chromium
cyber-sec-journey Documentation of my studies: pentest methodology, Kali Linux tools, SQL Injection, and Bash. Kali Linux, Bash

Stack

Security and infrastructure

Kali Linux Zabbix Python Bash Docker Redis

Development

JavaScript Node.js React PostgreSQL Prisma Git

Certifications

  • Ethical Hacker, Cisco
  • Introduction to Cybersecurity, Cisco
  • Oracle Cloud Infrastructure Foundations Associate, Oracle

Work in Progress

  • Expand the monitoring lab with Linux agents and encrypted communication (TLS/PSK) between agent and server
  • Integrate the triage SOAR with a commercial SIEM
  • Document each lesson learned with screenshots and step-by-step reproduction instructions

Ethical Use Notice

The reconnaissance and pentest tools in this profile are educational and must be used only in environments you own or have written authorization to test.

Contact

joaovpz.dev@gmail.com · LinkedIn

Away from the computer: climber, runner, and powerlifter.

Snake animation

©JoaoVPZDev

Pinned Loading

  1. cyber-sec-journey cyber-sec-journey Public

    This repository documents a practical learning journey, from Linux and networking fundamentals to penetration-testing methodology, application security, and the responsible use of Kali Linux tools.…

    Python 4

  2. leak-monitor leak-monitor Public

    Grab the emails already collected by the OSINT kits in this toolkit (CSV export from SpiderFoot, SQLite workspace from recon-ng, or just a simple list) and check each one against known data breach …

    JavaScript

  3. soar-triagem soar-triagem Public

    Receives alerts via webhook (e.g., SIEM), enriches them with external sources (AbuseIPDB), and automatically escalates (Slack) according to risk rules.

    Python

  4. howtocyberdeckandstuff howtocyberdeckandstuff Public

    How to Cyberdeck and Stuff is a centralized resource hub for building custom, retro-futuristic portable computers. The repository offers practical guides on selecting hardware, including single-boa…

    Python 2

  5. checklist-hardening checklist-hardening Public

    Checks basic security settings of the host and generates a report with a score.

    Shell

  6. lab-redes lab-redes Public

    This repository compiles labs I conducted during Cisco Networking Academy courses. Each lab simulates a real-world scenario in Cisco Packet Tracer and is documented as a technical report: topology,…