Anthony Aranda

I found and fixed an authentication bypass in a team 2FA web application. I added a route guard that checks the session’s MFA level, required verification before password resets, and retested both attack paths.

For my Neuro-sama senior capstone, I configured AWS EC2, Amazon RDS, and an Elastic IP to host backend services. I connected the application to its database and an Ollama model for chatbot responses and likelihood-based screening of pasted emails.

I also integrated the VirusTotal API into a Gmail-connected email-screening project to flag suspicious messages. I’m continuing to practice service enumeration and security fundamentals through Hack The Box, where I’ve documented findings and remediation from lab exercises.