Cybersecurity-Projects README

The project's README from github.com/CarterPerez-dev/Cybersecurity-Projects. As one markdown file: README.md.

Kali-dragon-icon svg

Cybersecurity Projects 🐉

70 Cybersecurity Projects, Certification Roadmaps & Resources

stars forks issues license
projects resources
contribute

@carterperez.dev on Instagram

View Complete Projects:

Projects

Currently building: DDoS Mitigation Tool


Quick Navigation

Projects

Hands-on cybersecurity projects with full source code, organized in four tiers — Foundations (pre-beginner, first-time programmers), Beginner, Intermediate, and Advanced.

Certification Roadmaps

10 structured career paths with certification guides for SOC Analyst, Pentester, Security Engineer, and more.

Learning Resources

Tools, courses, certifications, communities, and frameworks for cybersecurity professionals.


Projects

Foundations Beginner Intermediate Advanced

[!TIP] Want to be walked through building these instead of reading finished source? CertGames has guided project courses that build real security tools from scratch, step by step, with the concepts explained as you go. Same projects, less getting stuck. FREE

Foundations Projects

[!NOTE] Start here if this is your first time coding. The Foundations tier is pre-beginner — built for someone who has never written Python, has barely used a terminal, and is new to cybersecurity. Source files are heavily commented as a teaching aid, and every learn/ folder explains concepts from zero. Once you're comfortable here, the Beginner projects assume you already know the language and move faster.

What makes Foundations different:

  • Single-file projects — the entire tool lives in one readable Python file. No file-hopping.
  • Heavy teaching comments — every line that introduces a new concept is annotated inline.
  • Numpy-style docstrings on every function — what it does, why it exists, every parameter.
  • Extra-deep learn/ folders — Python features and security concepts both explained from zero.
  • Senior-level code, beginner-level explanations — the code itself is still production-quality.
Project Info What You'll Learn
Hash Identifier
Identify hash types by prefix, length, and charset
Step 1/3 2-4h Python Foundations Hash families (MD5, SHA, bcrypt, Argon2) • PHC string format • Pattern matching • Pure-function design
Source Code | Docs
HTTP Headers Scanner
Audit a URL's response headers for missing or weak security controls
Step 2/3 3-5h Python Foundations HTTP fundamentals • Security headers (CSP, HSTS, X-Frame-Options) • httpx requests • Scored audits
Source Code | Docs
Password Manager
Encrypted local vault with master password unlock
Step 3/3 6-8h Python Foundations Argon2id key derivation • AES-GCM authenticated encryption • Secure on-disk vaults • Master-password workflows
Source Code | Docs

Beginner Projects

Project Info What You'll Learn
Simple Port Scanner
Async TCP port scanner in C++ @deniskhud
2-4h C++ Beginner TCP socket programming • Async I/O patterns • Service detection
Source Code | Docs
Keylogger
Capture keyboard events with timestamps
1-2h Python Beginner Event handling • File I/O • Ethical considerations
Source Code | Docs
Caesar Cipher
CLI encryption/decryption tool
1-2h Python Beginner Classical cryptography • Brute force attacks • CLI design
Source Code | Docs
DNS Lookup CLI Tool
Query DNS records with WHOIS
2-3h Python Beginner DNS protocols • WHOIS queries • Reverse DNS lookup
Source Code | Docs
Simple Vulnerability Scanner
Check software against CVE databases
3-4h Go Beginner CVE databases • Dependency scanning • Vulnerability assessment
Source Code | Docs
Network Traffic Analyzer
Capture and analyze packets
3-5h Python C++ Beginner Packet capture • Protocol analysis • Traffic visualization
Source (C++) | Docs (C++) | Source (Python) | Docs (Python)
Hash Cracker
Dictionary and brute-force cracking
3-4h C++ Beginner Hash algorithms • Dictionary attacks • Password security
Source Code | Docs
Steganography Multi-Tool
Hide data in images, audio, QR, PDFs, text
8-10h Go Beginner Multi-format steganography • Encrypted AEAD envelope • Zero-width Unicode • Audio LSB • QR Reed-Solomon injection
Source Code | Docs
Deserialization Gadget Lab
Read untrusted Marshal and YAML without ever reviving it, then break it
12-16h Ruby Docker Beginner Gadget chains • Marshal binary format • Gated vs ungated dispatch • TracePoint veto • CVE-2026-41316
Source Code | Docs
gem: marshalsea
Canary Token Generator
Self-hosted honeytokens that alert on access
2-3h Go React Docker Beginner Deception defense • Honeytokens • MySQL wire protocol • PDF/DOCX patching • Webhook + Telegram alerting
Source Code | Docs
iglowinthedark.com
Phishing Domain Generator & Quishing Scanner
Typosquat generation + QR phishing detection
2-3h Python Beginner Homoglyph attacks • Typosquatting • QR code analysis • Domain intelligence
Learn More
SSH Brute Force Detector
Monitor and block SSH attacks
2-4h Python Beginner Log parsing • Attack detection • Firewall automation
Learn More
Simple C2 Beacon
Command and Control beacon/server
3-5h Python React Docker Beginner C2 architecture • MITRE ATT&CK • WebSocket protocol • XOR encoding
Source Code | Docs
Base64 Encoder/Decoder
Multi-format encoding tool
1h Python Beginner Base64/32 encoding • URL encoding • Auto-detection
Source Code | Docs
Linux CIS Hardening Auditor
CIS benchmark compliance checker
3-4h Bash Beginner CIS benchmarks • System hardening • Compliance scoring • Shell scripting
Source Code | Docs
Systemd Persistence Scanner
Hunt Linux persistence mechanisms
2-3h Go Beginner Persistence techniques • Systemd internals • Cron analysis • Threat hunting
Source Code | Docs
Linux eBPF Security Tracer
Real-time syscall tracing with eBPF
2-3h Python C Beginner eBPF programs • Syscall tracing • BCC framework • Security observability
Source Code | Docs
Trojan Application Builder
Educational malware lifecycle demo
2-3h Python Beginner Trojan anatomy • Data exfiltration • File encryption • Attack lifecycle
Learn More
DNS Sinkhole
Pi-hole-style malware domain blocker
3-4h Go Beginner DNS protocol • Blocklist management • Query logging • Network defense
Learn More
Firewall Rule Engine
Parse and validate iptables/nftables rules
2-3h V Beginner Firewall internals • Rule parsing • iptables/nftables • V language
Source Code | Docs
LLM Prompt Injection Firewall
Sandbox the effects, not the prompt: fence untrusted text, authorize the tool calls, match the secret on the way out
14-18h Python Docker Beginner Provenance fencing • Taint propagation • Unicode tag-block smuggling • Encoding closure • OWASP LLM01:2025
Source Code | Docs
detection hard-benign FPR

Intermediate Projects

Project Info What You'll Learn
Security News Scraper
Aggregate cybersecurity news
3-4h Go Beginner Web scraping • CVE parsing • Database storage
Source Code | Docs
Payload Obfuscation Engine
Multi-layer payload obfuscation toolkit
2-4d Go Intermediate Obfuscation techniques • Polymorphism • AV evasion • Signature detection
Learn More
SIEM Dashboard
Log aggregation with correlation
3-5d Flask React Intermediate SIEM concepts • Log correlation • Full-stack development<b

Cybersecurity-Projects (CarterPerez-dev/Cybersecurity-Projects)

Searching Database…

Что это такое?Это растущая коллекция из 70 практических проектов по кибербезопасности с полным исходным кодом, разбитых на четыре уровня сложности, а также 10 дорожных карт по сертификации и отобранные учебные ресурсы для карьеры в кибербезопасности.
Это одно приложение или набор отдельных проектов?Это индекс из десятков самостоятельных проектов (менеджер паролей, сканер портов, панель SIEM, C2 beacon и т. д.). У каждого свой исходный код и документация, написанные на том языке, который лучше всего подходит к идее. Это не один общий инструмент.
С чего новичку начать и как всё устроено?Проекты разделены на уровни Foundations, Beginner, Intermediate и Advanced. Если вы никогда не программировали, начните с Foundations: он рассчитан на тех, кто пишет код впервые, с кодом в одном файле, подробными комментариями и обширными папками learn/.
Нужен ли мне конкретный язык или набор инструментов?Единого стека не требуется: большинство проектов Foundations написаны на обычном Python, но другие используют C++, Go или даже V (например, Firewall Rule Engine). Поэтому выбирайте проекты на том языке, который хотите практиковать.
Безопасно ли собирать такие вещи, как Keylogger или Trojan Application Builder?Они прямо помечены как учебные демонстрации техник злоумышленников. Их цель — объяснить такие понятия, как жизненный цикл вредоносного ПО и этические соображения, а не применять их для реальных атак.
Что такое CertGames?CertGames — это бесплатная платформа-компаньон, упомянутая в README. Она предлагает пошаговые курсы по проектам, где вы шаг за шагом создаёте те же инструменты с нуля.
Что входит помимо 70 проектов?В репозиторий также входят 10 структурированных дорожных карт по сертификации (аналитик SOC, пентестер, инженер по безопасности и другие), а также отобранные инструменты, курсы и сообщества для карьеры в кибербезопасности.
Список проектов уже завершён?Нет, он активно пополняется. Помимо 70 готовых проектов, в README есть и проект в разработке: DDoS Mitigation Tool.
Size
107.9 MB
Stars
8.3K
Updated
CommitOct 14
Age
11mo
Commits · 90 Days