Simulating the Hunt

A controlled environment that replicates real-world security scenarios—built for showcasing penetration testing logic, responsible disclosure workflows, and ethical bug hunting practices.

Context

A controlled environment that replicates real-world security scenarios—built for showcasing penetration testing logic, responsible disclosure workflows, and ethical bug hunting practices.

Goals

Simulated Nmap Port Scanning - Emulates Nmap CLI output to demonstrate the fundamentals of network reconnaissance in a safe, sandboxed environment.
HTTP Header Inspector - Fetches and displays response headers from real-world websites, offering insights into server behavior and configuration.
Brute Force Simulation - Demonstrates a dictionary attack on a fictional target with mock credential responses—purely for educational purposes.
Exportable Reports - All simulations can be exported as .txt files for documentation or educational reference.
Ethical Disclaimer Included - Clear messaging throughout the app emphasizes its educational nature, with links to best security practices and ethical hacking guidelines.

Constraints

Deployment platform (Nixpacks) failed to auto-detect Django, requiring manual provisioning using custom Procfile, requirements.txt, and runtime.txt.
Django ORM constraints necessitated mock database configurations, despite the app being non-persistent.
Extra caution was taken to ensure the project couldn't be misunderstood or misused as an actual attack tool.

Approach

Custom build pipeline added for Railway deployment, including minimal Django requirements.
Migrations were satisfied using mock schemas to fulfill Django's expectations without storing real data.
Ethical considerations implemented via static disclaimers and best-practice references—reinforcing that the toolkit is a controlled simulation, not an exploit platform.