https://defhopeee.github.io/Portfolio of Hope Njoki Nyambura — Full-Stack Developer with expertise in web development, cybersecurity, and data analysis. Showcasing projects, lab challenges, resume, and certifications. 2025-09-27T18:50:36+00:00 Hope Njoki Nyambura https://defhopeee.github.io/ Jekyll © 2025 Hope Njoki Nyambura /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2025-08-01T00:00:00+00:00 2025-09-27T18:47:34+00:00 https://defhopeee.github.io/posts/personal-portfolio/ Hope Njoki Nyambura

Summary: Mobile-first portfolio showcasing projects, resume, and lab challenges. Tech Stack: Jekyll (Chirpy), HTML, CSS, JavaScript Key Features: Responsive design Project writeups and downloadable resume Contact form integrating email Lessons Learned: Clear UX, fast-loading assets, and concise content improve visitor engagement.

2025-07-01T00:00:00+00:00 2025-09-27T18:45:34+00:00 https://defhopeee.github.io/posts/sqli-lab/ Hope Njoki Nyambura

Problem Statement: Exploit a vulnerable login form in a training web app. Approach: Inspect login POST request with Burp Suite. Inject ' OR '1'='1 payload to bypass login. Extracted a username safely from the test database. Tools Used: Burp Suite, sqlmap, local test DB Lessons Learned: Parameterized queries prevent SQL injection; never build SQL with unsanitized input.

2025-06-01T00:00:00+00:00 2025-09-27T18:45:04+00:00 https://defhopeee.github.io/posts/lfi-lab/ Hope Njoki Nyambura

Problem Statement: Identify and exploit a Local File Inclusion vulnerability in a training app. Approach: Recon: Found ?page= parameter vulnerable to include(). Proof of Concept: ?page=../../../../etc/passwd Remediation: Sanitize input, whitelist files, use realpath(). Tools Used: Browser, Burp Suite, curl, PHP sandbox Lessons Learned: Never include files from unsanitized user input;...

2025-05-01T00:00:00+00:00 2025-09-27T18:44:25+00:00 https://defhopeee.github.io/posts/secure-online-exam/ Hope Njoki Nyambura

Summary: Exam platform with lockdown browser features to reduce cheating. Tech Stack: PHP, JavaScript, MySQL Key Features: Timed exams and question randomization Lockdown mode to disable copy/paste/navigation Results analytics dashboard Impact: Lockdown features contributed to a 75% drop in detected cheating attempts. Lessons Learned: Combine client-side controls with server-side va...

2025-03-01T00:00:00+00:00 2025-09-27T18:43:54+00:00 https://defhopeee.github.io/posts/ecommerce-shoe-ordering/ Hope Njoki Nyambura

Summary: Built a scalable e-commerce platform focused on shoe orders, integrated M-Pesa STK payment. Tech Stack: PHP, MySQL, JavaScript, HTML/CSS, M-Pesa STK API Key Features: Product catalog, cart, and checkout M-Pesa STK payment integration Admin dashboard for order management Impact: Handled 150+ orders/month during pilot run. Lessons Learned: Payment integration details (callbac...