Cybersecurity-Projects README

The project's README from github.com/CarterPerez-dev/Cybersecurity-Projects. As one markdown file: README.md.

Kali-dragon-icon svg

Cybersecurity Projects 🐉

70 Cybersecurity Projects, Certification Roadmaps & Resources

stars forks issues license
projects resources
contribute

@carterperez.dev on Instagram

View Complete Projects:

Projects

Currently building: DDoS Mitigation Tool


Quick Navigation

Projects

Hands-on cybersecurity projects with full source code, organized in four tiers — Foundations (pre-beginner, first-time programmers), Beginner, Intermediate, and Advanced.

Certification Roadmaps

10 structured career paths with certification guides for SOC Analyst, Pentester, Security Engineer, and more.

Learning Resources

Tools, courses, certifications, communities, and frameworks for cybersecurity professionals.


Projects

Foundations Beginner Intermediate Advanced

[!TIP] Want to be walked through building these instead of reading finished source? CertGames has guided project courses that build real security tools from scratch, step by step, with the concepts explained as you go. Same projects, less getting stuck. FREE

Foundations Projects

[!NOTE] Start here if this is your first time coding. The Foundations tier is pre-beginner — built for someone who has never written Python, has barely used a terminal, and is new to cybersecurity. Source files are heavily commented as a teaching aid, and every learn/ folder explains concepts from zero. Once you're comfortable here, the Beginner projects assume you already know the language and move faster.

What makes Foundations different:

  • Single-file projects — the entire tool lives in one readable Python file. No file-hopping.
  • Heavy teaching comments — every line that introduces a new concept is annotated inline.
  • Numpy-style docstrings on every function — what it does, why it exists, every parameter.
  • Extra-deep learn/ folders — Python features and security concepts both explained from zero.
  • Senior-level code, beginner-level explanations — the code itself is still production-quality.
Project Info What You'll Learn
Hash Identifier
Identify hash types by prefix, length, and charset
Step 1/3 2-4h Python Foundations Hash families (MD5, SHA, bcrypt, Argon2) • PHC string format • Pattern matching • Pure-function design
Source Code | Docs
HTTP Headers Scanner
Audit a URL's response headers for missing or weak security controls
Step 2/3 3-5h Python Foundations HTTP fundamentals • Security headers (CSP, HSTS, X-Frame-Options) • httpx requests • Scored audits
Source Code | Docs
Password Manager
Encrypted local vault with master password unlock
Step 3/3 6-8h Python Foundations Argon2id key derivation • AES-GCM authenticated encryption • Secure on-disk vaults • Master-password workflows
Source Code | Docs

Beginner Projects

Project Info What You'll Learn
Simple Port Scanner
Async TCP port scanner in C++ @deniskhud
2-4h C++ Beginner TCP socket programming • Async I/O patterns • Service detection
Source Code | Docs
Keylogger
Capture keyboard events with timestamps
1-2h Python Beginner Event handling • File I/O • Ethical considerations
Source Code | Docs
Caesar Cipher
CLI encryption/decryption tool
1-2h Python Beginner Classical cryptography • Brute force attacks • CLI design
Source Code | Docs
DNS Lookup CLI Tool
Query DNS records with WHOIS
2-3h Python Beginner DNS protocols • WHOIS queries • Reverse DNS lookup
Source Code | Docs
Simple Vulnerability Scanner
Check software against CVE databases
3-4h Go Beginner CVE databases • Dependency scanning • Vulnerability assessment
Source Code | Docs
Network Traffic Analyzer
Capture and analyze packets
3-5h Python C++ Beginner Packet capture • Protocol analysis • Traffic visualization
Source (C++) | Docs (C++) | Source (Python) | Docs (Python)
Hash Cracker
Dictionary and brute-force cracking
3-4h C++ Beginner Hash algorithms • Dictionary attacks • Password security
Source Code | Docs
Steganography Multi-Tool
Hide data in images, audio, QR, PDFs, text
8-10h Go Beginner Multi-format steganography • Encrypted AEAD envelope • Zero-width Unicode • Audio LSB • QR Reed-Solomon injection
Source Code | Docs
Deserialization Gadget Lab
Read untrusted Marshal and YAML without ever reviving it, then break it
12-16h Ruby Docker Beginner Gadget chains • Marshal binary format • Gated vs ungated dispatch • TracePoint veto • CVE-2026-41316
Source Code | Docs
gem: marshalsea
Canary Token Generator
Self-hosted honeytokens that alert on access
2-3h Go React Docker Beginner Deception defense • Honeytokens • MySQL wire protocol • PDF/DOCX patching • Webhook + Telegram alerting
Source Code | Docs
iglowinthedark.com
Phishing Domain Generator & Quishing Scanner
Typosquat generation + QR phishing detection
2-3h Python Beginner Homoglyph attacks • Typosquatting • QR code analysis • Domain intelligence
Learn More
SSH Brute Force Detector
Monitor and block SSH attacks
2-4h Python Beginner Log parsing • Attack detection • Firewall automation
Learn More
Simple C2 Beacon
Command and Control beacon/server
3-5h Python React Docker Beginner C2 architecture • MITRE ATT&CK • WebSocket protocol • XOR encoding
Source Code | Docs
Base64 Encoder/Decoder
Multi-format encoding tool
1h Python Beginner Base64/32 encoding • URL encoding • Auto-detection
Source Code | Docs
Linux CIS Hardening Auditor
CIS benchmark compliance checker
3-4h Bash Beginner CIS benchmarks • System hardening • Compliance scoring • Shell scripting
Source Code | Docs
Systemd Persistence Scanner
Hunt Linux persistence mechanisms
2-3h Go Beginner Persistence techniques • Systemd internals • Cron analysis • Threat hunting
Source Code | Docs
Linux eBPF Security Tracer
Real-time syscall tracing with eBPF
2-3h Python C Beginner eBPF programs • Syscall tracing • BCC framework • Security observability
Source Code | Docs
Trojan Application Builder
Educational malware lifecycle demo
2-3h Python Beginner Trojan anatomy • Data exfiltration • File encryption • Attack lifecycle
Learn More
DNS Sinkhole
Pi-hole-style malware domain blocker
3-4h Go Beginner DNS protocol • Blocklist management • Query logging • Network defense
Learn More
Firewall Rule Engine
Parse and validate iptables/nftables rules
2-3h V Beginner Firewall internals • Rule parsing • iptables/nftables • V language
Source Code | Docs
LLM Prompt Injection Firewall
Sandbox the effects, not the prompt: fence untrusted text, authorize the tool calls, match the secret on the way out
14-18h Python Docker Beginner Provenance fencing • Taint propagation • Unicode tag-block smuggling • Encoding closure • OWASP LLM01:2025
Source Code | Docs
detection hard-benign FPR

Intermediate Projects

Project Info What You'll Learn
Security News Scraper
Aggregate cybersecurity news
3-4h Go Beginner Web scraping • CVE parsing • Database storage
Source Code | Docs
Payload Obfuscation Engine
Multi-layer payload obfuscation toolkit
2-4d Go Intermediate Obfuscation techniques • Polymorphism • AV evasion • Signature detection
Learn More
SIEM Dashboard
Log aggregation with correlation
3-5d Flask React Intermediate SIEM concepts • Log correlation • Full-stack development<b

Cybersecurity-Projects (CarterPerez-dev/Cybersecurity-Projects)

Searching Database…

这是什么?这是一个不断扩充的网络安全实战项目合集,包含 70 个附完整源代码的项目,分为四个难度层级。此外还有 10 条认证学习路线图,以及面向网络安全职业的精选学习资源。
这是一个应用,还是多个独立项目?这是一个包含数十个独立项目的索引,例如密码管理器、端口扫描器、SIEM 仪表盘、C2 信标等。每个项目都有自己的源代码和文档,并使用最适合该概念的编程语言编写,并不是一个统一的工具。
初学者应该从哪里开始?项目是如何组织的?项目分为 Foundations、Beginner、Intermediate 和 Advanced 四个层级。如果你从未写过代码,请从 Foundations 开始。这一层专为首次学习编程的人设计,代码为单文件并带有大量注释,还配有内容丰富的 learn/ 文件夹。
学习这些项目需要特定的编程语言或工具链吗?不需要统一的技术栈。大多数 Foundations 项目使用纯 Python 编写,但也有项目使用 C++、Go,甚至 V(例如 Firewall Rule Engine)。因此,请选择与你想练习的语言相符的项目。
自己动手构建 Keylogger 或 Trojan Application Builder 安全吗?这些项目被明确标注为攻击者技术的教学演示,旨在帮助你理解恶意软件生命周期等概念以及相关的伦理问题,不应用于真实攻击。
什么是 CertGames?CertGames 是 README 中提到的一个免费配套平台,提供循序渐进的项目课程,引导你从零开始构建同样的工具。
除了 70 个项目,还包含什么?仓库还收录了 10 条结构化的认证学习路线图,例如 SOC Analyst、Pentester、Security Engineer 等,以及面向网络安全职业的精选工具、课程和社区资源。
项目列表已经完成了吗?还没有,它仍在持续更新。除了 70 个已完成的项目,README 还列出了一个正在开发中的条目:DDoS Mitigation Tool(DDoS 缓解工具)。
Size
107.9 MB
Stars
8.3K
Updated
CommitOct 14
Age
11mo
Commits · 90 Days