Ethical-Hacking-100-Projects-Challenge - A hands-on cybersecurity learning repository featu

项目说明

<p align="center">
<img src=" alt="Ethical Hacking 100 Projects Challenge Banner" width="55%" />
</p>

<h1 align="center">🛡️ Ethical Hacking 100 Projects Challenge</h1>

<p align="center">
<a href="
<img src=" alt="Stars" />
</a>
<a href="
<img src=" alt="Forks" />
</a>
<img src=" alt="Python" />
<img src=" alt="License" />
<a href="
<img src=" alt="Portfolio" />
</a>
</p>

<p align="center">
<img src=" alt="Progress" />
</p>

<p align="center"><b>Hands-on cybersecurity projects for practical ethical hacking and defensi learning by <a href=" Salam</a>.</b></p>

---

🚀 Quick Na

📘 O

📂 Project Index

⚙️ Quick Start

🧭 Learning Path Progression

⚠️ Ethical & Legal Notice

👤 Maintainer

📄 License

---

📘 O

This repository documents my Ethical Hacking 100 Projects Challenge journey — building practical, research-grade security tools spanning offensi, traffic analysis, digital forensics, threat hunting, and defensi engineering.

Each project focuses on real-world cybersecurity disciplines:

🌐 Network Traffic Inspection & Protocol Engineering: Raw packet sniffing, custom protocol forging, wireless deauth monitoring, and ARP/DNS spoofing detection.

💻 Web Application Security & Exploitation: crawlers, SQL injection scanners, Web Application Firewalls (WAF), WAF e, and cache poisoning analysis.

🔍 Digital Forensics, System Monitoring & Integrity: Li forensics, process auditing, anti-debugging detection, API hooking alerts, file integrity monitoring (FIM), and PE/ELF binary analysis.

🛡️ Threat Hunting & SIEM Detection Engineering: YARA signature engines, Sigma detection rules, SIEM log correlation, and proacti hunting dashboards.

🦠 Malware Traffic Analysis & C2 Pattern Detection: C2 beaconing analysis, DNS covert tunneling discovery, DGA lexical classification, and A/file packing.

📧 Phishing Campaign Triage & Email Defense: RFC 822 EML parsing, SPF/DKIM/DMARC authentication , typosquatting heuristics, and automated risk scoring.

☁️ Cloud, IoT & Web3 Security: Cloud misconfiguration auditing, IoT protocol/credential testing, Tor dark web scraping, and smart contract analysis.

> ✅ Purpose: Education, defensi, and authorized security testing only.

---

📂 Project Index

| # | Project Name | Domain | Key Concepts & Highlights | Direct Link |
|---|---|---|---|---|
| 01 | Packet Sniffer | Network Security | Raw sockets, packet dissection, IP/TCP/UDP filtering | Explore |
| 02 | Port Scanner | Network Security | Socket-based TCP port scanning and service banner grabbing | Explore |
| 03 | ARP Spoof Detector | Network Security | ARP table monitoring and cache poisoning alert engine | Explore |
| 04 | Keylogger | Offensi | Keystroke interception, event listening, and buffer logging | Explore |
| 05 | Reverse Shell | Offensi | Client-server TCP socket command-and-control handler | Explore |
| 06 | Web Crawler | Web Security | Automated web spider, link extraction, and endpoint enumeration | Explore |
| 07 | FTP Cracker | Auth & Password | Multi-threaded FTP credential brute-force testing | Explore |
| 08 | SSH Cracker | Auth & Password | Paramiko-based SSH dictionary and brute-force scanner | Explore |
| 09 | SQL Scanner | Web Security | Automated parameter injection testing and SQL auditing | Explore |
| 10 | Keylogger with Email Exfiltration | Offensi | Stealth keystroke capture with periodic SMTP email exfiltration | Explore |
| 11 | Ransomware Simulator | Malware Simulation | Controlled file encryption/decryption simulator (AES/Fernet) | Explore |
| 12 | Ransomware Simulator v2 | Malware Simulation | Ad multi-threaded encryption simulation and key recovery | Explore |
| 13 | Network Scanner | Network Security | ARP request broadcaster and local subnet host discovery | Explore |
| 14 | Deauth Detector | Wireless Security | 802.11 Wi-Fi management frame monitoring and deauth alert | Explore |
| 15 | Deauth Detector 2 | Wireless Security | Enhanced multi-channel wireless deauth and beacon anomaly monitor | Explore |
| 16 | Packet Crafting Engine | Network Security | Custom layer crafting (Ethernet, IP, TCP, ICMP) | Explore |
| 17 | Interacti Crafting Engine | Network Security | Interactive CLI terminal packet builder and transmitter | Explore |
| 18 | DNS Spoof & Rebinding Detector | Network Security | DNS cache poisoning detection and rebinding attack analyzer | Explore |
| 19 | Process Monitor & Anti-Debugging | System Security | Real-time process lifecycle watcher and debugger e detector | Explore |
| 20 | Reverse Shell with Interactive TTY | Offensi | Full PTY terminal allocation, remote shell, and bi-directional file transfer | Explore |
| 21 | Steganography Tool | Cryptography | Least Significant Bit (LSB) image payload hiding and extraction | Explore |
| 22 | Memory Forensics Analyzer | Digital Forensics | RAM dump artifact carver, process memory search, and string extraction | Explore |
| 23 | Simple Buffer O | Exploit De | Stack memory manipulation, return address o, and shellcode demo | Explore |
| 24 | API Hooking Detector | System Security | Inline hook and Import Address Table (IAT) tampering detection | Explore |
| 25 | Log Analysis & SIEM Simulator | Defensi | Security event log parsing, rule-based correlation, and alert generation | Explore |
| 26 | Android App Security Scanner | Mobile Security | APK static analysis, AndroidManifest auditing, and dangerous permissions scan | Explore |
| 27 | Web Application Firewall (WAF) | Web Security | Reverse proxy HTTP inspection, signature matching, and request filtering | Explore |
| 28 | Web Scanner | Web Security | Web spider with automated SQLi, XSS, and security header auditing | Explore |
| 29 | Multi-Threaded Port Scanner | Network Security | High-speed concurrent port discovery and service banner extraction | Explore |
| 30 | File Integrity Monitor (FIM) | Defensi | Cryptographic hashing (SHA-256) and file modification/tamper alerts | Explore |
| 31 | Remote Access Trojan (RAT) | Offensi | Command & control client, screenshot capture, and persistence mechanisms | Explore |
| 32 | Blockchain Explorer & Contract Analyzer | Web3 Security | Ethereum blockchain transaction analysis and smart contract auditing | Explore |
| 33 | Dark Web Scraper | OSINT & Intelligence | Tor proxy routing (SOCKS5), .onion site scraping, and threat intel collection | Explore |
| 34 | Antivirus E — File Packer | Malware Analysis | PE header mutation, payload encryption, and static signature obfuscation | Explore |
| 35 | Cloud Security Scanner | Cloud Security | AWS cloud resource misconfiguration, open S3 buckets, and IAM audit | Explore |
| 36 | Password Cracker | Auth & Password | Multi-hash dictionary and brute-force cracking engine (MD5, SHA1, SHA256) | Explore |
| 37 | IoT Scanner | IoT Security | Embedded device discovery, default credential auditing, and MQTT/UPnP scan | Explore |
| 38 | PE/ELF Analysis Tool | Malware Analysis | Portable Executable & ELF binary parser, section headers, and imports audit | Explore |
| 39 | SQL Injection Exploitation Tool | Web Security | Automated boolean-blind and error-based SQLi database schema extraction | Explore |
| 40 | WAF E Tool | Web Security | Payload mutation, SQLi/XSS character encoding bypass, and header fuzzing | Explore |
| 41 | Auto-Recon Framework | Recon & OSINT | Automated target reconnaissance: subdomain discovery, port scanning & asset mapping | Explore |
| 42 | Network Traffic Analyzer | Network Security | Protocol distribution analytics, flow statistics, and bandwidth monitoring | Explore |
| 43 | YARA Rule Engine | Detection Engineering | Malware signature matching engine, custom rule parsing, and threat classification | Explore |
| 44 | C Database | Management | Local package in matching against C and C | Explore |
| 45 | Web Cache Poisoning Scanner | Web Security | Unkeyed HTTP header injection, cache-control auditing, and HTML reporting | Explore |
| 46 | Sigma Rule Engine | Detection Engineering | YAML Sigma rule parser, log e, and MITRE ATT&CK alert generation | Explore |
| 47 | Threat Hunting Dashboard | Threat Hunting | Log-based threat hunting (LOLBins, brute force, C2 beaconing) with rich CLI & HTML report | Explore |
| 48 | Malware Traffic Analysis | Network Forensics | C2 beaconing jitter detection, DNS tunneling entropy analysis, DGA classification | Explore |
| 49 | Phishing Campaign Detector | Email Security | RFC 822 EML parser, SPF/DKIM/DMARC audit, brand typosquatting, URL analysis, risk scoring | Explore |
| 50 | AWS CloudTrail Analyzer | Cloud Security & Detection | Multi-event CloudTrail parsing, IAM pri escalation, root activity, S3 exposure | Explore |
| 51 | Windows Event Log Parser | System Forensics & SIEM | Windows Security log analysis (JSON/CS force (4625), process creation (4688) | Explore |
| 52 | Network Baselining Tool | Network Defense & Anomaly | Traffic baselining, protocol/port anomaly detection, spike alerts, HTML reporting | Explore |
| 53 | Incident Response Automation Framework | Digital Forensics & IR | 🎯 Milestone 50: Li collection, SHA-256 chain of custody, IOC triage, HTML report | Explore |
| 54 | Cloud Security Posture Assessment | Cloud Security & Compliance | Multi-module AWS CSPM tool, CIS benchmark audit, IAM/S3/SG misconfigurations | Explore |

---

⚙️ Quick Start

1) Clone Repository

2) Create En

Activate:

Windows (PowerShell/CMD): ven\activate

Linux/macOS: source venv/bin/activate

3) Install Common Dependencies

---

🧭 Learning Path Progression

If you are exploring the repository for structured learning, follow this recommended progression:

🔹 Phase 1: Network Fundamentals & Traffic Inspection

Master packet capture, protocol dissection, and network boundary analysis:

Projects: 01: Packet Sniffer • 02: Port Scanner • 03: ARP Spoof Detector • 12: Network Scanner • 13: Deauth Detector • 14: Packet Crafting • 26: Multi-Threaded Scanner • 39: Traffic Analyzer • 49: Network Baselining Tool

🔹 Phase 2: Web Application Security & API Defense

Understand HTTP mechanics, injection , web application firewalls, and cache manipulation:

Projects: 06: Web Crawler • 09: SQL Scanner • 24: Web Application Firewall • 25: Web Scanner • 36: SQLi Exploitation • 37: WAF E • 42: Web Cache Poisoning

🔹 Phase 3: Host Forensics, System Monitoring & Binary Analysis

Analyze process execution, inspect memory, detect API manipulation, and parse compiled binaries:

Projects: 16: Process Monitor & Anti-Debug • 18: Steganography • 19: Memory Forensics • 20: Buffer O • 21: API Hooking Detector • 27: File Integrity Monitor • 35: PE/ELF Analyzer • 48: Windows Event Log Parser • 50: Incident Response Framework

🔹 Phase 4: Offensi, Malware & Social Engineering

Safely study ad techniques, command-and-control architectures, credential har, and phishing:

Projects: 04: Keylogger • 05: Reverse Shell • 07: FTP Cracker • 08: SSH Cracker • 10: Keylogger Exfiltration • 11: Ransomware Simulator • 17: Interactive TTY Shell • 28: RAT • 31: File Packer / A • 33: Password Cracker • 46: Phishing Campaign Detector

🔹 Phase 5: Detection Engineering, SIEM & Threat Hunting

Build proacti capabilities, signature matching, MITRE ATT&CK mapping, and traffic forensics:

Projects: 22: SIEM Simulator • 38: Auto-Recon Framework • 40: YARA Rule Engine • 41: C Database • 43: Sigma Rule Engine • 44: Threat Hunting Dashboard • 45: Malware Traffic Analysis • 47: CloudTrail Analyzer • 51: Cloud Security Posture Assessment

---

⚠️ Ethical & Legal Notice

This repository is intended strictly for:

Cybersecurity education & defense skill-building

Defensi research & detection engineering

Authorized penetration testing labs

❌ Do not run these tools against systems, endpoints, or networks without explicit written authorization.

The maintainer is not responsible for misuse.

---

👤 Maintainer

Abdul Salam

🌐 Portfolio: salamcs.tech

🐙 GitHub:

💼 LinkedIn: Abdul Salam

---

📄 License

This repository is licensed under the MIT License.

---

<p align="center"><i>Built with 💻 + 🛡️ for ethical security learning by <a href=" Salam</a>.</i></p>

项目信息

开发语言：Python

Star 数：2

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A hands-on cybersecurity learning repository featuring 100 ethical hacking projects focused on recon, web security, malware simulation, forensics, and defensive tooling.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。