Geoff Sandoval

Portrait of Geoff Sandoval

Software Developer · Aspiring Penetration Tester

Scroll

Based in Philippines

2+Years writing code
30+Labs & CTF rooms
5+Projects shipped
100%Curiosity

(01) Mission

I build software that feels effortless — then I try to break it. The best developers think like attackers.

(02) What drives me

Build. Break. Secure.

01

Build

Full-stack web apps with React, Next.js and Node — fast, accessible, built to last.

02

Break

Ethical hacking in labs and CTFs: recon, exploitation, privilege escalation. Learning how systems fail.

03

Secure

System administration and secure-by-default habits: hardening, least privilege, clean deployments.

(03) The story

Chapter 01

The Student

BS Information Technology. Weekly system-administration labs taught me how real systems run — and how they break.

Chapter 02

The Builder

Late nights turning ideas into code: web apps, tools, interfaces — and this very site.

Chapter 03

The Breaker

Now training as a penetration tester. Every system I build, I want to know exactly how it could fall.

(04) What I do

Services & community

Development

  • JavaScript
  • React
  • Next.js
  • Node.js
  • Python
  • Three.js
  • Git
  • System Administration

Security

  • Linux
  • Networking
  • Nmap
  • Burp Suite
  • OWASP Top 10
  • Wireshark
  • TryHackMe / HTB

(05) Featured work

Welcome to the lab.

2 builds — from cinematic front-ends to enterprise infrastructure — each with the stack, techniques and security decisions behind it.

gpscrypt.me preview

01 / 02Web Development · Personal · 2026

gpscrypt.me

The site you’re on. A cinematic, scroll-told portfolio with real-time 3D — statically exported for speed and SEO, and shipped by CI to a custom domain.

Image weight cut
98%
Pre-rendered HTML
100%
Servers to attack
0
  • Next.js 16
  • React 19
  • three.js
  • GSAP
  • ScrollTrigger
  • Lenis
  • GitHub Actions
  • GitHub Pages

Features

  • Kinetic, character-split typography
  • Pinned scroll storytelling with cross-fading chapters
  • Real-time WebGL orbit rings and particles
  • Magnetic and scroll-velocity-reactive interactions
  • Fully responsive and reduced-motion aware

Techniques

  • Static export — every word is in the HTML for search engines
  • Smooth scroll on GSAP’s ticker, synced with ScrollTrigger
  • AI-generated scene plates composited with CSS masks
  • WebP image pipeline with sharp (≈10 MB → under 250 KB)
  • WebGL render loop pauses off-screen (IntersectionObserver)

Security

  • Static-only architecture: no server, database or form backend
  • Subresource Integrity hashes on every CDN script
  • Least-privilege CI token: read code, write Pages — nothing else
  • Lockfile-pinned dependencies installed with npm ci
  • HTTPS-only on a custom domain

02 / 02System Administration · ITEP 414 · 2026

System Administration Portfolio

A semester-long lab portfolio: planning the enterprise infrastructure of a 20-person startup, then deploying, networking and securing Ubuntu and Windows servers — every step documented.

Employees planned for
20
Server OSes deployed
2
Backup strategy
3-2-1
  • Ubuntu Server 22.04 LTS
  • Windows Server
  • OpenSSH
  • DHCP
  • Virtual machines
  • Microsoft Defender
  • draw.io
  • Linux CLI

Features

  • Enterprise infrastructure plan for QWERTY Solution Inc. (20 staff, 4 departments)
  • Network topology: ISP → firewall → router → core switch → department LANs
  • Ubuntu Server and Windows Server VMs installed and configured
  • OpenSSH remote access and DHCP networking, verified end to end
  • BIOS vs UEFI research and a Linux boot sequence flowchart

Techniques

  • Requirements-driven planning per department and headcount
  • VLAN segmentation and redundancy design: SLA fiber, LTE failover, RAID
  • Manual disk partitioning and CLI package management
  • Professional technical writing: installation guide and manual

Security

  • Perimeter firewall plus VLAN isolation between departments
  • Least privilege, regular patching, MFA and a password manager (NIST SP 800-63B)
  • 3-2-1 backups following CISA guidance
  • Remote administration over encrypted SSH; servers patched right after install
More on GitHub — github.com/sandoval02 ↗

Let's build something secure.

hello@gpscrypt.me