portfolio.ui-kit

— dark-theme web components for cybersecurity & dev portfolio · v0.1

# jake frenzel
# terminal-inspired, minimalist
# inter · jetbrains mono
> cat ./tokens/color.yml

Color

8 tokens · 4 semantic
Surfaces
bg
#0a0e1a
surface
#0f1424
surface-2
#151b2e
border
#1e2a42
Text & accent
text
#e2e8f0
muted
#94a3b8
accent · teal
#2dd4bf
accent · blue
#60a5fa
> cat ./tokens/type.yml

Typography

inter · jetbrains mono
display
inter 800 · -0.035em
76 / 80
Jake Frenzel
h1
inter 700 · -0.02em
32 / 40
Selected Projects
h3 / card title
inter 600 · -0.01em
18 / 28
SSH Log Anomaly Detector
body
inter 400
15 / 24
A Python-based tool that ingests auth logs, clusters sessions by behavioural fingerprints, and flags outliers via isolation-forest scoring.
mono / label
jetbrains mono 500
12 · 0.12em tracking · upper
> ls ./projects
mono / code
jetbrains mono 400
13 / 20
jake@frenzel:~$ whoami → security_engineer
> ls ./components/nav

Navigation

fixed · backdrop-blur
> cat ./components/hero.tsx

Hero

// hi, my name is

Jake Frenzel.

I break things, then build things that break less. Security engineer & developer based in the Pacific Northwest — currently working on offensive-tooling, detection engineering, and the occasional pretty web app.

●available for contract · Q2 2026
→Seattle, WA (UTC-8)
✦OSCP · eWPTX · CISSP
> ls ./components/badge

Badges & Pills

6 variants
pill · teal
python rust wireshark nmap burp suite
pill · stack
Next.js TypeScript PostgreSQL Docker Tailwind
difficulty
Easy Medium Hard Insane
> ls ./components/project-card

Project Card

surface · hover: border teal@35

packetline

active

Lightweight TUI packet-capture inspector. Parses pcap streams in Rust, renders protocol trees in a blessed-style terminal UI with regex filter expressions.

Rust tokio libpcap
source demo

siphon

active

Secrets-scanning pre-commit hook with pluggable entropy rules. Ships 40+ detectors for cloud, CI, and SaaS tokens. Used by ~3k repos.

Go git-hooks regex yaml
source docs

burrow

archived

Self-hosted tunnelling proxy with per-route ACLs. Originally a home-lab experiment — now retired in favour of Cloudflare tunnels.

Python asyncio nginx
source writeup
> ls ./components/skill-group

Skill Group

category · icon · pills
category.01
Offensive Security
burp suite nmap metasploit bloodhound crackmapexec ffuf
category.02
Detection & DFIR
splunk sigma yara zeek volatility wireshark
category.03
Engineering
python rust go typescript postgres docker terraform
> cat ./components/timeline.tsx

Experience Timeline

  • Senior Security Engineer · Northwind Labs

    MAR 2024 — PRESENT

    Lead the internal red team. Built a continuous-validation harness that replays adversary TTPs against production telemetry nightly and files tickets when coverage regresses.

    red team purple team detection engineering

  • Application Security Engineer · Halcyon

    JUN 2021 — MAR 2024

    Shipped the SDL from scratch across 6 product teams. Wrote the threat-modelling handbook, built the pre-merge SAST gates, ran quarterly tabletop exercises with leadership.

    appsec threat modelling sdl

  • Security Consultant · NCC Group

    AUG 2019 — JUN 2021

    Pentesting & code-review engagements across fintech, healthcare, and embedded. Averaged 14 findings per engagement; authored 23 client deliverables.

    pentesting code review
> ls ./components/writeup-card

Writeup Card

CTF · platform · difficulty
HTB web Hard

Hospital — chaining LFI to SYSTEM via GhostScript

A Ghostscript RCE gadget hidden behind an avatar-upload LFI, pivoting through a misconfigured ADCS template to full domain compromise.

2026.03.12 read writeup
picoCTF crypto Medium

Broken Lattice — recovering ECDSA nonces with LLL

When reused nonces leak 4 bits each, a 50-signature lattice attack is all it takes. We walk the math, then break it in Sage in under a page.

2026.02.01 read writeup
TryHackMe forensics Easy

Memory Lane — pulling creds out of a stale lsass dump

A beginner-friendly tour of the Windows memory acquisition toolchain, from winpmem through Volatility plugins to Mimikatz-on-disk.

2026.01.19 read writeup
research reverse-eng Insane

Unpacking a commercial EDR's user-mode hooks

Fingerprinting a well-known endpoint agent's injected DLL, mapping its IAT hooks, and evaluating three bypass strategies against its telemetry pipeline.

2025.11.04 read writeup
> cat ./components/contact-row.tsx

Contact Rows

github github.com/jakefrenzel ↗ linkedin in/jakefrenzel ↗ email jake [at] frenzel.dev → pgp 0xA47C 9F12 · /pgp.asc ↓