Welbourne Security

Cyber Intelligence Projects, Defensive Operations, and Investigations.

Live Footprint Snapshot

Inspecting browser exposure... This panel shows the quick browser details exposed immediately on page load.

Public IP Not checked

Browser Detecting...

Operating System Detecting...

Language Detecting...

Time Zone Detecting...

Projects

Current project work.

Hardware + Web App

RFIDemon

Raspberry Pi RFID analysis and cloning workstation for authorised MIFARE Classic testing, with RC522 support, AutoPwn phases, encrypted Pi-side storage, pairing, dashboard proxy, and laptop receiver.

CTF Competition

Pwn2Play CTF

DMU Hackers' flagship Capture The Flag competition. 50 challenges, 12 categories, hybrid in-person and online. I created the event as Chairman in 2026.

Past CTFs · Archive

Past CTFs

A playable archive of the CTF challenges I've written for past events — replay them or read the full solutions at ctf.welbournesecurity.com.

View projects

Blue Team

Defensive operations reference.

Blue team knowledge base

A working reference for SOC, IR, and DFIR — Splunk SPL queries, PowerShell for incident response, DFIR commands, and IR playbooks. Five entries live; more added as new notes are written up.

Open Blue Team

Detection Splunk SPL + PowerShell

Triage-ready SPL — failed-login bursts, beaconing, lateral movement — plus PowerShell one-liners for live Windows IR.

Response DFIR + IR Playbooks

Forensic triage with KAPE, Volatility, and Eric Zimmerman tools, alongside step-by-step phishing and ransomware playbooks.

Links

My links.

Credential Wall

Credential signals.

View credential details

Contact

Open to cyber intelligence and security-focused opportunities.

Secure contact guidance Use email for first contact, and request a safer transfer route if the material is sensitive. View security.txt