cybersec-projects - Hands-on cybersecurity projects built for learning

项目说明

Cyber Security Projects

<img align = "" src=" width="1000" height="250" alt="awjunaid">

!GitHub contributors
!GitHub followers
!YouTube Channel Subscribers
!Discord
!X (formerly Twitter) Follow
!GitHub commit activity
!Website
!GitHub repo size
!Category !Type !Status

> Hands-on cybersecurity projects built for learning, experimentation, and practical security research — featuring offensive and defensi, automation scripts, and real-world simulations for ethical hacking practice.

Contact With Me:

<a href=" target="_blank">
<img src=" height="27" alt="youtube logo" />
</a>
<a href=" target="_blank">
<img src=" height="27" alt="instagram logo" />
</a>
<a href=" target="_blank">
<img src=" height="27" alt="twitch logo" />
</a>
<a href="mailto:" target="_blank">
<img src=" height="27" alt="proton mail logo" />
</a>
<a href=" target="_blank">
<img src=" height="27" alt="linkedin logo" />
</a>
<a href=" target="_blank">
<img src=" height="27" alt="twitter logo" />
</a>
<a href=" target="_blank">
<img src=" height="27" alt="discord logo" />
</a>

# 💰 You can help me by Donating
![BuyMeACoffee]()
![The SQL Injection Handbook]()
![Kali Linux Unleashed]()
![359 Python Automation Scripts]()

📑 Table of Contents

⚔️ Offensi Projects

- Reconnaissance & Enumeration
- Web Application Security
- Network & Wireless Attacks
- Exploitation & Post-Exploitation
- Malware & E Research
- Hardware, IoT & Firmware
- Social Engineering & OSINT
- Blockchain & Cloud

🛡️ Defensi Projects

- Monitoring & Detection
- Forensics & Incident Response
- Hardening & Secure Architecture
- Cloud, Container & Pipeline Security
- Threat Intelligence & Deception

⚔️ Offensi Projects

Reconnaissance & Enumeration

| Project | Description |
|---|---|
| Subdomain Enumeration Tool | Brute-force and DNS-based subdomain discovery |
| Directory Brute-Force Tool | Automated wordlist-based directory discovery |
| Network Scanner | Scans for open ports and exposed services |
| Sniff Network Traffic Tool | Captures and analyzes network packets |
| Web App Crawler + Vuln Correlator | Crawls applications and correlates attack paths |
| Automated Scanner Integration | Orchestrates multiple scanning tools |

Web Application Security

| Project | Description |
|---|---|
| XSS Finder | Detects reflected and stored cross-site scripting |
| SQLi Tester | Detects and safely tests injection |
| CSRF Checker | Identifies cross-site request forgery points |
| CSRF Exploit Demo Kit | Chained CSRF attack demonstrations for training |
| Web Sockets Pentest Tool | Tests real-time communication channels for flaws |
| API Abuse & Fuzzing Tool | Tests REST/GraphQL endpoints for abuse cases |
| Mobile App Scanner | Static and dynamic mobile app testing |

Network & Wireless Attacks

| Project | Description |
|---|---|
| Wi-Fi Security Tester | E home Wi-Fi network weaknesses |
| DNS Spoofing Simulator | Practices detection and attack methods |
| ARP Spoof / MITM Tool (Lab) | Explores man-in-the-middle traffic interception |
| Packet Injection Tool | Crafts and sends custom network packets |
| TLS Downgrade & MITM Tester | Examines TLS configuration weaknesses |
| Wireless Protocol Fuzzing | Tests Zigbee, LoRa, and 802.11 frame handling |
| Network Pi Lab Scripts | Simulates lateral mo across networks |

Exploitation & Post-Exploitation

| Project | Description |
|---|---|
| Reverse Shell Framework | Generates and manages shells in a lab en |
| Exploit Template Library | Reusable exploit skeletons |
| Shell Upload Tool | Uploads payloads to target test hosts |
| Create Custom Payloads | Modular payload generator |
| ROP Chain Builder Helper | Builds return-oriented programming payloads |
| Binary Instrumentation Toolkit | Hooks and manipulates running processes |
| PoC Repository | Catalog of proof-of-concept exploits |
| Exploit Chaining Workflow | Automates multi-step exploit sequences |
| Password Cracking with GPUs | GPU-accelerated password cracking |
| Password Spraying Automation | Tests credential reuse patterns |
| Credential Dump Analyzer | Parses and analyzes leaked credential sets |
| Simple Password Cracker | Dictionary/brute-force cracker for learning |
| Password Manager Attack Simulations | Tests vault export and weaknesses |
| Side-Channel Attack Experiments | Timing and power analysis study |

Malware & E Research

| Project | Description |
|---|---|
| Basic Keylogger (Lab-Only) | Learn keystroke capture mechanics |
| Simple Ransomware Simulator | Sandbox-based behavior analysis |
| Malware Obfuscation Practice | Tests packing and obfuscation techniques |
| Rootkit Practice (Sandbox) | Create and remo rootkits |
| Kernel Backdoor Detector/Creator (Lab) | Studies kernel-le techniques |
| Steganography Encoder/Decoder | Hides data within images and audio |
| Binary Re Exercises | Unpacks and analyzes binaries |
| Firmware Re | Finds flaws in embedded firmware |
| Log E Simulator | Studies e techniques in a safe en |
| IDS/IPS Bypass Tests | Crafts payloads to evade detection systems |
| Obfuscation & Packer Research Toolkit | Studies the effects of packers |
| C2 Mini Framework | Lab-based command & control functionality |

Hardware, IoT & Firmware

| Project | Description |
|---|---|
| IoT Device Fuzzing Tool | Fuzzes protocols used by IoT devices |
| Bluetooth Protocol Tester | Scans and tests Bluetooth services |
| USB Implant Simulator | Emulates malicious USB behaviors in a lab |
| Hardware Fault Injection Lab | Obser |

Social Engineering & OSINT

| Project | Description |
|---|---|
| Phishing Campaign Simulator | Creates safe phishing training simulations |
| Automate Phishing Page Builder | Fast, lab-only phishing page templates |
| Social Engineering Toolkit | Email/SMS template simulator for training |
| Dark Web Scraper (Research) | Aggregates threat intelligence data |
| Browser Extension for Security Testing | Injects and scans pages for testing |

Blockchain & Cloud

| Project | Description |
|---|---|
| Smart Contract Audit Tools (Offensive POV) | Detects in smart contracts |
| Blockchain Pentest Harness | Tests contract functions and flows |
| Cloud Misconfiguration Exploit Scripts | Targets insecure cloud configurations |
| Basic Honeypot | Set up to catch and log attackers |
| Red / Blue Exercise Scenarios Generator | Creates realistic red/blue team engagements |

---

🛡️ Defensi Projects

Monitoring & Detection

| Project | Description |
|---|---|
| Snort/Suricata IDS Setup | Basic intrusion detection deployment |
| Host-Based Monitoring Scripts | File integrity and process watchers |
| SIEM Dashboard for Logs | Ingests and security events |
| Threat Detection Using ML | Anomaly detection prototype |
| Log Aggregation & Parser Tools | Normalizes and searches log data |
| Management Dashboard | Tracks the lifecycle of security findings |
| Rootkit Detection & Remo | Heuristic-based rootkit scanning |

Forensics & Incident Response

| Project | Description |
|---|---|
| Digital Forensic Analysis Lab | Captures and analyzes forensic artifacts |
| Basic Malware Analysis Sandbox | Safely runs and obser samples |
| Forensic Timeline Builder | Correlates artifacts into event timelines |
| Malware Behavior Analyzer | Extracts beha indicators of compromise |

Hardening & Secure Architecture

| Project | Description |
|---|---|
| TLS Setup & Hardening Guide | Secure communication configuration guide |
| Two-Factor Authentication Demo | Demonstrates 2FA flows and bypass testing |
| Configure Firewall Rule Automation | Templates and testing scripts for firewall rules |
| Full-Disk Encryption Demo & Key Management | Best practices for disk encryption |
| Secure Web Application Template | Hardened starter application |
| Secure API Authentication Examples | JWT/OAuth best-practice implementations |
| Microservices Security Checklist & Tests | Secures inter-service communications |

Cloud, Container & Pipeline Security

| Project | Description |
|---|---|
| Cloud Security Posture Tool | Detects misconfigurations and risky permissions |
| Container Security Hardening Scripts | Scans and enforces container image standards |
| Secure CI/CD Pipeline Examples | Signing, scanning, and gating practices |
| SCADA/ICS Security Study Lab | Emulates industrial protocols safely |
| Data Leak Pre Demo | Detects data exfiltration patterns |

Threat Intelligence & Deception

| Project | Description |
|---|---|
| Honeynet | Distributed honeypots with centralized logging |
| Threat Intel Collection & Enrichment Pipeline | Enriches indicators of compromise (IOCs) |
| Ransomware Detection Playbook | Detects and prevents encryption activity |

<di="center">

*All offensi are intended for authorized, lab, or educational use only.*

</div>

项目信息

开发语言：Python

Star 数：22

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Hands-on cybersecurity projects built for learning, experimentation, and practical security research — featuring offensive and defensive tools, automation scripts, and real-world simulations for ethical hacking practice.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。