Skip to content
View sterlouk's full-sized avatar
1 follower · 2 following
  • Aristotle University of Thessaloniki

Achievements

Achievement: Pull SharkAchievement: YOLO

Achievements

Achievement: Pull SharkAchievement: YOLO

Highlights

  • Pro

Block or report sterlouk

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
sterlouk/README.md

Hi, I'm Stergios Loukas 👋

Electrical & Computer Engineering student at the Aristotle University of Thessaloniki, focused on cybersecurity. I like taking something that works and making it hard to break — then proving it with tests. Currently training in the Google.org Cyber Route cybersecurity program.

🔎 Looking for a cybersecurity internship.

🔐 Security

  • passman-security-hardening — Exploited and fixed a deliberately vulnerable PHP/MySQL password manager (SQLi, stored XSS, plaintext credentials), then found and fixed more in my own code: an IDOR, CSRF, session fixation, bcrypt migration. 26 black-box attack tests in CI.
  • secure-udp-chat-voip — End-to-end encrypted P2P chat and VoIP over UDP in pure Java: AES-256-GCM with anti-replay protection.
  • web-vulnerability-assessment-methodology — A full web vulnerability-assessment workflow: recon → scanning → CVE mapping → MITRE ATT&CK → hardening.
  • nis2-radiology-security-policies — NIS2 compliance: role-based security policies and technical controls for a hospital radiology department.
  • cryptography-exercises — Vigenère, RSA with square-and-multiply, and CBC/CFB error propagation, each implemented and verified in Python.
  • sgarden-hackathon — 🥈 2nd place, ISSEL DevSecOps hackathon: hardening a deliberately vulnerable web app.

🛠️ Engineering & systems

  • cool-laser — A wireless joystick-aimed laser turret that sends messages through its own beam: three Arduino nodes, RF radios, and an optical data link.
  • neural-networks-cifar10-mnist — CNNs on CIFAR-10 (40-variant hyperparameter sweep) and an RBF network on MNIST, in PyTorch.
  • operations-research-gurobi — Integer programming with Gurobi: school timetabling and capacitated facility location.
  • Degrid · BeerThusiasts — Full-stack web projects.

🧪 Lab & numerical work

🎓 Aristotle University of Thessaloniki · 💻 Python · Java · C/C++ · MATLAB · JavaScript · PHP

📫 Reach me at sterlouk@ece.auth.gr

Pinned Loading

  1. cool-laser cool-laser Public

    Wireless joystick-aimed laser turret that sends messages through its beam: 3 Arduino nodes on RFM22 radios, on-off keyed optical link, Python decoder + UI

    C++

  2. neural-networks-cifar10-mnist neural-networks-cifar10-mnist Public

    Neural Networks coursework (AUTH, Fall 2025): k-NN/nearest-centroid baselines and a 40-variant CNN sweep on CIFAR-10, RBF network on MNIST (PyTorch)

    Jupyter Notebook

  3. nis2-radiology-security-policies nis2-radiology-security-policies Public

    NIS2-compliant security policies and technical measures for a hospital radiology department (RIS/PACS/MRI/MyHealth). Google.org Cyber Route program.

  4. secure-udp-chat-voip secure-udp-chat-voip Public

    End-to-end encrypted P2P chat and VoIP over UDP in pure Java: AES-256-GCM, anti-replay, zero runtime dependencies. Started as a Computer Networks II project (AUTH).

    Java

  5. sgarden-hackathon sgarden-hackathon Public

    2nd place, ISSEL DevSecOps hackathon (AUTH, Dec 2025): hardening a deliberately vulnerable Node/React platform. SAST, DAST, dependency and code-quality fixes.

    JavaScript

  6. web-vulnerability-assessment-methodology web-vulnerability-assessment-methodology Public

    Methodology for assessing web app security: recon, scanning, CVE mapping and MITRE ATT&CK classification. Anonymized write-up from the Google.org Cyber Route program.