Cybersecurity-Projects README

The project's README from github.com/CarterPerez-dev/Cybersecurity-Projects. As one markdown file: README.md.

Kali-dragon-icon svg

Cybersecurity Projects 🐉

70 Cybersecurity Projects, Certification Roadmaps & Resources

stars forks issues license
projects resources
contribute

@carterperez.dev on Instagram

View Complete Projects:

Projects

Currently building: DDoS Mitigation Tool


Quick Navigation

Projects

Hands-on cybersecurity projects with full source code, organized in four tiers — Foundations (pre-beginner, first-time programmers), Beginner, Intermediate, and Advanced.

Certification Roadmaps

10 structured career paths with certification guides for SOC Analyst, Pentester, Security Engineer, and more.

Learning Resources

Tools, courses, certifications, communities, and frameworks for cybersecurity professionals.


Projects

Foundations Beginner Intermediate Advanced

[!TIP] Want to be walked through building these instead of reading finished source? CertGames has guided project courses that build real security tools from scratch, step by step, with the concepts explained as you go. Same projects, less getting stuck. FREE

Foundations Projects

[!NOTE] Start here if this is your first time coding. The Foundations tier is pre-beginner — built for someone who has never written Python, has barely used a terminal, and is new to cybersecurity. Source files are heavily commented as a teaching aid, and every learn/ folder explains concepts from zero. Once you're comfortable here, the Beginner projects assume you already know the language and move faster.

What makes Foundations different:

  • Single-file projects — the entire tool lives in one readable Python file. No file-hopping.
  • Heavy teaching comments — every line that introduces a new concept is annotated inline.
  • Numpy-style docstrings on every function — what it does, why it exists, every parameter.
  • Extra-deep learn/ folders — Python features and security concepts both explained from zero.
  • Senior-level code, beginner-level explanations — the code itself is still production-quality.
Project Info What You'll Learn
Hash Identifier
Identify hash types by prefix, length, and charset
Step 1/3 2-4h Python Foundations Hash families (MD5, SHA, bcrypt, Argon2) • PHC string format • Pattern matching • Pure-function design
Source Code | Docs
HTTP Headers Scanner
Audit a URL's response headers for missing or weak security controls
Step 2/3 3-5h Python Foundations HTTP fundamentals • Security headers (CSP, HSTS, X-Frame-Options) • httpx requests • Scored audits
Source Code | Docs
Password Manager
Encrypted local vault with master password unlock
Step 3/3 6-8h Python Foundations Argon2id key derivation • AES-GCM authenticated encryption • Secure on-disk vaults • Master-password workflows
Source Code | Docs

Beginner Projects

Project Info What You'll Learn
Simple Port Scanner
Async TCP port scanner in C++ @deniskhud
2-4h C++ Beginner TCP socket programming • Async I/O patterns • Service detection
Source Code | Docs
Keylogger
Capture keyboard events with timestamps
1-2h Python Beginner Event handling • File I/O • Ethical considerations
Source Code | Docs
Caesar Cipher
CLI encryption/decryption tool
1-2h Python Beginner Classical cryptography • Brute force attacks • CLI design
Source Code | Docs
DNS Lookup CLI Tool
Query DNS records with WHOIS
2-3h Python Beginner DNS protocols • WHOIS queries • Reverse DNS lookup
Source Code | Docs
Simple Vulnerability Scanner
Check software against CVE databases
3-4h Go Beginner CVE databases • Dependency scanning • Vulnerability assessment
Source Code | Docs
Network Traffic Analyzer
Capture and analyze packets
3-5h Python C++ Beginner Packet capture • Protocol analysis • Traffic visualization
Source (C++) | Docs (C++) | Source (Python) | Docs (Python)
Hash Cracker
Dictionary and brute-force cracking
3-4h C++ Beginner Hash algorithms • Dictionary attacks • Password security
Source Code | Docs
Steganography Multi-Tool
Hide data in images, audio, QR, PDFs, text
8-10h Go Beginner Multi-format steganography • Encrypted AEAD envelope • Zero-width Unicode • Audio LSB • QR Reed-Solomon injection
Source Code | Docs
Deserialization Gadget Lab
Read untrusted Marshal and YAML without ever reviving it, then break it
12-16h Ruby Docker Beginner Gadget chains • Marshal binary format • Gated vs ungated dispatch • TracePoint veto • CVE-2026-41316
Source Code | Docs
gem: marshalsea
Canary Token Generator
Self-hosted honeytokens that alert on access
2-3h Go React Docker Beginner Deception defense • Honeytokens • MySQL wire protocol • PDF/DOCX patching • Webhook + Telegram alerting
Source Code | Docs
iglowinthedark.com
Phishing Domain Generator & Quishing Scanner
Typosquat generation + QR phishing detection
2-3h Python Beginner Homoglyph attacks • Typosquatting • QR code analysis • Domain intelligence
Learn More
SSH Brute Force Detector
Monitor and block SSH attacks
2-4h Python Beginner Log parsing • Attack detection • Firewall automation
Learn More
Simple C2 Beacon
Command and Control beacon/server
3-5h Python React Docker Beginner C2 architecture • MITRE ATT&CK • WebSocket protocol • XOR encoding
Source Code | Docs
Base64 Encoder/Decoder
Multi-format encoding tool
1h Python Beginner Base64/32 encoding • URL encoding • Auto-detection
Source Code | Docs
Linux CIS Hardening Auditor
CIS benchmark compliance checker
3-4h Bash Beginner CIS benchmarks • System hardening • Compliance scoring • Shell scripting
Source Code | Docs
Systemd Persistence Scanner
Hunt Linux persistence mechanisms
2-3h Go Beginner Persistence techniques • Systemd internals • Cron analysis • Threat hunting
Source Code | Docs
Linux eBPF Security Tracer
Real-time syscall tracing with eBPF
2-3h Python C Beginner eBPF programs • Syscall tracing • BCC framework • Security observability
Source Code | Docs
Trojan Application Builder
Educational malware lifecycle demo
2-3h Python Beginner Trojan anatomy • Data exfiltration • File encryption • Attack lifecycle
Learn More
DNS Sinkhole
Pi-hole-style malware domain blocker
3-4h Go Beginner DNS protocol • Blocklist management • Query logging • Network defense
Learn More
Firewall Rule Engine
Parse and validate iptables/nftables rules
2-3h V Beginner Firewall internals • Rule parsing • iptables/nftables • V language
Source Code | Docs
LLM Prompt Injection Firewall
Sandbox the effects, not the prompt: fence untrusted text, authorize the tool calls, match the secret on the way out
14-18h Python Docker Beginner Provenance fencing • Taint propagation • Unicode tag-block smuggling • Encoding closure • OWASP LLM01:2025
Source Code | Docs
detection hard-benign FPR

Intermediate Projects

Project Info What You'll Learn
Security News Scraper
Aggregate cybersecurity news
3-4h Go Beginner Web scraping • CVE parsing • Database storage
Source Code | Docs
Payload Obfuscation Engine
Multi-layer payload obfuscation toolkit
2-4d Go Intermediate Obfuscation techniques • Polymorphism • AV evasion • Signature detection
Learn More
SIEM Dashboard
Log aggregation with correlation
3-5d Flask React Intermediate SIEM concepts • Log correlation • Full-stack development<b

Cybersecurity-Projects (CarterPerez-dev/Cybersecurity-Projects)

red-team
Searching Database…

What is this?This is a growing collection of 70 hands-on cybersecurity projects with full source code, organized into four difficulty tiers, plus 10 certification roadmaps and curated learning resources for cybersecurity careers.
Is this one app or a bunch of separate projects?It's an index of dozens of standalone projects (password manager, port scanner, SIEM dashboard, C2 beacon, etc.), each with its own source code and docs, written in whichever language fits the concept, not a single unified tool.
Where should a beginner start, and how is it organized?Projects are grouped into Foundations, Beginner, Intermediate, and Advanced tiers; start at Foundations if you've never coded — it's built for first-time programmers with heavily commented single-file code and deep learn/ folders.
Do I need a specific language or toolchain to work through these?No single stack is required: most Foundations projects are plain Python, but others use C++, Go, or even V (e.g. the Firewall Rule Engine), so pick projects matching the language you want to practice.
Is it safe to build things like the Keylogger or the Trojan Application Builder?These are explicitly labeled as educational demos of attacker techniques — intended to teach concepts like malware lifecycle and ethical considerations, not to be used for real attacks.
What is CertGames?CertGames is a free companion platform mentioned in the README that offers guided, step-by-step project courses walking you through building the same tools from scratch.
What's included besides the 70 projects?The repo also bundles 10 structured certification roadmaps (SOC Analyst, Pentester, Security Engineer, and more) plus curated tools, courses, and community resources for cybersecurity careers.
Is the project list finished?No, it's actively growing — alongside the 70 finished projects, the README lists a work-in-progress entry (a DDoS Mitigation Tool).
Size
107.9 MB
Stars
8.3K
Updated
CommitOct 14
Age
11mo
Commits · 90 Days