Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Cybersecurity-Projects — Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇 | Kitploit
Tools/GitHubGitHub/carterperez-dev/cybersecurity-projects
Web SecurityNetwork SecurityCryptographyPenetration TestingLearning & EducationCurated ResourcesLearning Paths & CoursesLabs & Practice
GitHubcarterperez-dev/cybersecurity-projects

Cybersecurity-Projects

Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇

5.0k7211062 days agoReviewed by Kitploit
View Repository
Website

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
<div align="center">
  <img width="260" height="260" alt="Kali-dragon-icon svg" src="https://assets.kitploit.com/production/public/readmes/9491/efcb3b6f9c53e3dacf579091fd9a3b86f9c707a8d630866d4a54642da82e34ef.png" alt="Kali Linux Icon"/>
  <h1 align="center">Cybersecurity Projects 🐉</h1>
  <p align="center">70 Cybersecurity Projects, Certification Roadmaps & Resources</p>
</div>

<div align="center">
  <img src="https://img.shields.io/github/stars/CarterPerez-dev/Cybersecurity-Projects" alt="stars"/>
  <img src="https://img.shields.io/github/forks/CarterPerez-dev/Cybersecurity-Projects" alt="forks"/>
  <img src="https://img.shields.io/github/issues/CarterPerez-dev/Cybersecurity-Projects" alt="issues"/>
  <img src="https://img.shields.io/github/license/CarterPerez-dev/Cybersecurity-Projects" alt="license"/>
  <br/>
  <img src="https://img.shields.io/badge/Cybersecurity-70_Projects-darkblue" alt="projects"/>
  <img src="https://img.shields.io/badge/Security-Learning_Resources-darkred" alt="resources"/>
</div>

<div align="center">
  <a href="https://github.com/sponsors/CarterPerez-dev">
    <img src="https://img.shields.io/static/v1?label=Contribute&amp;message=%E2%9D%A4&amp;logo=GitHub&amp;color=darkgreen" alt="contribute"/>
  </a>
</div>

  <br/>
<p align="center"><a href="https://www.instagram.com/carterperez.dev/"><img src="https://raw.githubusercontent.com/carterperez-dev/cybersecurity-projects/main/.github/assets/instagram-handle.svg" width="155" height="45" alt="@carterperez.dev on Instagram"/></a></p>

<h2 align="center"><strong>View Complete Projects:</strong></h2>
<div align="center">
  <a href="https://github.com/CarterPerez-dev/Cybersecurity-Projects/tree/main/PROJECTS">
    <img src="https://img.shields.io/badge/Full_Source_Code-43/70-blue?style=for-the-badge&amp;logo=github" alt="Projects"/>
  </a>
</div>

<p align="center"><sub><em>Currently building: DDoS Mitigation Tool</em></sub></p>

---

<div align="center">
  <a href="https://trendshift.io/repositories/20757?utm_source=repository-badge&amp;utm_medium=badge&amp;utm_campaign=badge-repository-20757" target="_blank" rel="noopener noreferrer">
    <img src="https://trendshift.io/api/badge/repositories/20757" alt="CarterPerez-dev/Cybersecurity-Projects | GitHub Trending #1 Repository of the Day" width="250" height="55"/>
  </a>
  <a href="https://trendshift.io/repositories/20757?utm_source=trendshift-badge&amp;utm_medium=badge&amp;utm_campaign=badge-trendshift-20757" target="_blank" rel="noopener noreferrer">
    <img src="https://trendshift.io/api/badge/trendshift/repositories/20757/daily?language=Go" alt="CarterPerez-dev/Cybersecurity-Projects | Trendshift Go #1 Repository of the Day" width="250" height="55"/>
  </a>
</div>

## Quick Navigation

### [Projects](#projects)
Hands-on cybersecurity projects with full source code, organized in four tiers — **Foundations** (pre-beginner, first-time programmers), **Beginner**, **Intermediate**, and **Advanced**.

### [Certification Roadmaps](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/ROADMAPS/README.md)
10 structured career paths with certification guides for SOC Analyst, Pentester, Security Engineer, and more.

### [Learning Resources](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/RESOURCES/README.md)
Tools, courses, certifications, communities, and frameworks for cybersecurity professionals.

---

# Projects

<div align="center">
  <img src="https://img.shields.io/badge/Foundations-5DEFD0?style=for-the-badge&amp;logo=bookstack&amp;logoColor=black&amp;labelColor=5DEFD0" alt="Foundations"/>
  <img src="https://img.shields.io/badge/Beginner-2EA44F?style=for-the-badge&amp;logo=leaflet&amp;logoColor=white" alt="Beginner"/>
  <img src="https://img.shields.io/badge/Intermediate-D4A017?style=for-the-badge&amp;logo=target&amp;logoColor=white" alt="Intermediate"/>
  <img src="https://img.shields.io/badge/Advanced-C73E3A?style=for-the-badge&amp;logo=shield&amp;logoColor=white" alt="Advanced"/>
</div>

---

> [!TIP]
> **Want to be walked through building these instead of reading finished source?** [CertGames](https://certgames.com) has guided project courses that build real security tools from scratch, step by step, with the concepts explained as you go. Same projects, less getting stuck. FREE

## Foundations Projects

> [!NOTE]
> **Start here if this is your first time coding.** The Foundations tier is *pre-beginner* — built for someone who has never written Python, has barely used a terminal, and is new to cybersecurity. Source files are heavily commented as a teaching aid, and every `learn/` folder explains concepts from zero. Once you're comfortable here, the Beginner projects assume you already know the language and move faster.
>
> **What makes Foundations different:**
> - **Single-file projects** — the entire tool lives in one readable Python file. No file-hopping.
> - **Heavy teaching comments** — every line that introduces a new concept is annotated inline.
> - **Numpy-style docstrings on every function** — what it does, why it exists, every parameter.
> - **Extra-deep `learn/` folders** — Python features and security concepts both explained from zero.
> - **Senior-level code, beginner-level explanations** — the code itself is still production-quality.

| Project | Info | What You'll Learn |
|---------|------|-------------------|
| **[Hash Identifier](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/foundations/hash-identifier)**<br>Identify hash types by prefix, length, and charset | ![Step 1/3](https://img.shields.io/badge/Step-1/3_easiest-2EA44F?style=flat&logo=bookstack&logoColor=white) ![2-4h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_2--4h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Foundations](https://img.shields.io/badge/%E2%97%8F_Foundations-00C9A7) | Hash families (MD5, SHA, bcrypt, Argon2) • PHC string format • Pattern matching • Pure-function design<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/foundations/hash-identifier) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/foundations/hash-identifier/learn) |
| **[HTTP Headers Scanner](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/foundations/http-headers-scanner)**<br>Audit a URL's response headers for missing or weak security controls | ![Step 2/3](https://img.shields.io/badge/Step-2/3_stepping_up-D4A017?style=flat&logo=bookstack&logoColor=white) ![3-5h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_3--5h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Foundations](https://img.shields.io/badge/%E2%97%8F_Foundations-00C9A7) | HTTP fundamentals • Security headers (CSP, HSTS, X-Frame-Options) • httpx requests • Scored audits<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/foundations/http-headers-scanner) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/foundations/http-headers-scanner/learn) |
| **[Password Manager](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/foundations/password-manager)**<br>Encrypted local vault with master password unlock | ![Step 3/3](https://img.shields.io/badge/Step-3/3_hardest-C73E3A?style=flat&logo=bookstack&logoColor=white) ![6-8h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_6--8h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Foundations](https://img.shields.io/badge/%E2%97%8F_Foundations-00C9A7) | Argon2id key derivation • AES-GCM authenticated encryption • Secure on-disk vaults • Master-password workflows<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/foundations/password-manager) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/foundations/password-manager/learn) |

---

## Beginner Projects

| Project | Info | What You'll Learn |
|---------|------|-------------------|
| **[Simple Port Scanner](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/simple-port-scanner)**<br>Async TCP port scanner in C++ [@deniskhud](https://github.com/deniskhud) | ![2-4h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_4--5h-blue) ![C++](https://img.shields.io/badge/C++-00599C?logo=cplusplus) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | TCP socket programming • Async I/O patterns • Service detection<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/simple-port-scanner) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/simple-port-scanner/learn) |
| **[Keylogger](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/keylogger)**<br>Capture keyboard events with timestamps | ![1-2h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_4--5h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Event handling • File I/O • Ethical considerations<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/keylogger) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/keylogger/learn) |
| **[Caesar Cipher](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/caesar-cipher)**<br>CLI encryption/decryption tool | ![1-2h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_4--5h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Classical cryptography • Brute force attacks • CLI design<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/caesar-cipher) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/caesar-cipher/learn) |
| **[DNS Lookup CLI Tool](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/dns-lookup)**<br>Query DNS records with WHOIS | ![2-3h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_6--7h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | DNS protocols • WHOIS queries • Reverse DNS lookup<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/dns-lookup) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/dns-lookup/learn) |
| **[Simple Vulnerability Scanner](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/simple-vulnerability-scanner)**<br>Check software against CVE databases | ![3-4h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_12--14h-blue) ![Go](https://img.shields.io/badge/Go-00ADD8?logo=go&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | CVE databases • Dependency scanning • Vulnerability assessment<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/simple-vulnerability-scanner) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/simple-vulnerability-scanner/learn) |
| **[Network Traffic Analyzer](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/network-traffic-analyzer)**<br>Capture and analyze packets | ![3-5h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_10--12h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![C++](https://img.shields.io/badge/C++-00599C?logo=cplusplus&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Packet capture • Protocol analysis • Traffic visualization<br>[Source (C++)](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/network-traffic-analyzer/cpp) \| [Docs (C++)](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/network-traffic-analyzer/cpp/learn) \| [Source (Python)](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/network-traffic-analyzer/python) \| [Docs (Python)](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/network-traffic-analyzer/python/learn) |
| **[Hash Cracker](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/hash-cracker)**<br>Dictionary and brute-force cracking | ![3-4h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_5--6h-blue) ![C++](https://img.shields.io/badge/C++-00599C?logo=cplusplus&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Hash algorithms • Dictionary attacks • Password security<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/hash-cracker) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/hash-cracker/learn) |
| **[Steganography Multi-Tool](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/Steganography.Multi.Tool.md)**<br>Hide data in images, audio, QR, PDFs, text | ![8-10h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_8--10h-blue) ![Go](https://img.shields.io/badge/Go-00ADD8?logo=go&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Multi-format steganography • Encrypted AEAD envelope • Zero-width Unicode • Audio LSB • QR Reed-Solomon injection<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/steganography-multi-tool) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/steganography-multi-tool/learn) |
| **[Deserialization Gadget Lab](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/deserialization-gadget-lab)**<br>Read untrusted Marshal and YAML without ever reviving it, then break it | ![12-16h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_12--16h-blue) ![Ruby](https://img.shields.io/badge/Ruby-CC342D?logo=ruby&logoColor=white) ![Docker](https://img.shields.io/badge/Docker-2496ED?logo=docker&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Gadget chains • Marshal binary format • Gated vs ungated dispatch • TracePoint veto • CVE-2026-41316<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/deserialization-gadget-lab) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/deserialization-gadget-lab/learn)<br>[![gem: marshalsea](https://img.shields.io/badge/gem-marshalsea-E9573F?style=flat&logo=rubygems&logoColor=white)](https://rubygems.org/gems/marshalsea) |
| **[Canary Token Generator](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/canary-token-generator)**<br>Self-hosted honeytokens that alert on access | ![2-3h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_8--10h-blue) ![Go](https://img.shields.io/badge/Go-00ADD8?logo=go&logoColor=white) ![React](https://img.shields.io/badge/React-61DAFB?logo=react&logoColor=black) ![Docker](https://img.shields.io/badge/Docker-2496ED?logo=docker&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Deception defense • Honeytokens • MySQL wire protocol • PDF/DOCX patching • Webhook + Telegram alerting<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/canary-token-generator) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/canary-token-generator/learn)<br>[![iglowinthedark.com](https://img.shields.io/badge/iglowinthedark.com-8B5CF6?style=flat&logo=googlechrome&logoColor=white)](https://iglowinthedark.com/) |
| **[Phishing Domain Generator & Quishing Scanner](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/Phishing.Domain.Generator.And.Quishing.Scanner.md)**<br>Typosquat generation + QR phishing detection | ![2-3h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_6--8h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Homoglyph attacks • Typosquatting • QR code analysis • Domain intelligence<br>[Learn More](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/Phishing.Domain.Generator.And.Quishing.Scanner.md) |
| **[SSH Brute Force Detector](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/SSH.Brute.Force.Detector.md)**<br>Monitor and block SSH attacks | ![2-4h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_2--4h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Log parsing • Attack detection • Firewall automation<br>[Learn More](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/SSH.Brute.Force.Detector.md) |
| **[Simple C2 Beacon](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/c2-beacon)**<br>Command and Control beacon/server | ![3-5h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_10--12h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![React](https://img.shields.io/badge/React-61DAFB?logo=react&logoColor=black) ![Docker](https://img.shields.io/badge/Docker-2496ED?logo=docker&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | C2 architecture • MITRE ATT&CK • WebSocket protocol • XOR encoding<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/c2-beacon) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/c2-beacon/learn) |
| **[Base64 Encoder/Decoder](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/Base64.Encoder.Decoder.md)**<br>Multi-format encoding tool | ![1h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_2h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Base64/32 encoding • URL encoding • Auto-detection<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/base64-tool) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/base64-tool/learn) |
| **[Linux CIS Hardening Auditor](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/linux-cis-hardening-auditor)**<br>CIS benchmark compliance checker | ![3-4h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_6--8h-blue) ![Bash](https://img.shields.io/badge/Bash-4EAA25?logo=gnubash&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | CIS benchmarks • System hardening • Compliance scoring • Shell scripting<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/linux-cis-hardening-auditor) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/linux-cis-hardening-auditor/learn) |
| **[Systemd Persistence Scanner](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/systemd-persistence-scanner)**<br>Hunt Linux persistence mechanisms | ![2-3h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_6--8h-blue) ![Go](https://img.shields.io/badge/Go-00ADD8?logo=go&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Persistence techniques • Systemd internals • Cron analysis • Threat hunting<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/systemd-persistence-scanner) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/systemd-persistence-scanner/learn) |
| **[Linux eBPF Security Tracer](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/linux-ebpf-security-tracer)**<br>Real-time syscall tracing with eBPF | ![2-3h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_10--12h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![C](https://img.shields.io/badge/C-A8B9CC?logo=c&logoColor=black) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | eBPF programs • Syscall tracing • BCC framework • Security observability<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/linux-ebpf-security-tracer) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/linux-ebpf-security-tracer/learn) |
| **[Trojan Application Builder](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/Trojan.Application.Builder.md)**<br>Educational malware lifecycle demo | ![2-3h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_8--10h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Trojan anatomy • Data exfiltration • File encryption • Attack lifecycle<br>[Learn More](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/Trojan.Application.Builder.md) |
| **[DNS Sinkhole](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/DNS.Sinkhole.md)**<br>Pi-hole-style malware domain blocker | ![3-4h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_10--12h-blue) ![Go](https://img.shields.io/badge/Go-00ADD8?logo=go&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | DNS protocol • Blocklist management • Query logging • Network defense<br>[Learn More](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/DNS.Sinkhole.md) |
| **[Firewall Rule Engine](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/firewall-rule-engine)**<br>Parse and validate iptables/nftables rules | ![2-3h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_6--8h-blue) ![V](https://img.shields.io/badge/V-5D87BF?logo=v&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Firewall internals • Rule parsing • iptables/nftables • V language<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/firewall-rule-engine) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/firewall-rule-engine/learn) |
| **[LLM Prompt Injection Firewall](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/prompt-injection-firewall)**<br>Sandbox the effects, not the prompt: fence untrusted text, authorize the tool calls, match the secret on the way out | ![14-18h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_14--18h-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Docker](https://img.shields.io/badge/Docker-2496ED?logo=docker&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Beginner-green) | Provenance fencing • Taint propagation • Unicode tag-block smuggling • Encoding closure • OWASP LLM01:2025<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/prompt-injection-firewall) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/beginner/prompt-injection-firewall/learn)<br>[![Website Demo](https://img.shields.io/badge/notsandboxed.com-008000?style=flat&logo=googlechrome&logoColor=white)](https://notsandboxed.com) |

## Intermediate Projects

| Project | Info | What You'll Learn |
|---------|------|-------------------|
| **[Security News Scraper](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/beginner/Security.News.Scraper.md)**<br>Aggregate cybersecurity news | ![3-4h](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_14--18h-blue) ![Go](https://img.shields.io/badge/Go-00ADD8?logo=go&logoColor=white) ![Beginner](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | Web scraping • CVE parsing • Database storage<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/security-news-scraper) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/security-news-scraper/learn) |
| **[Payload Obfuscation Engine](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/Payload.Obfuscation.Engine.md)**<br>Multi-layer payload obfuscation toolkit | ![2-4d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_3--5d-blue) ![Go](https://img.shields.io/badge/Go-00ADD8?logo=go&logoColor=white) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | Obfuscation techniques • Polymorphism • AV evasion • Signature detection<br>[Learn More](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/Payload.Obfuscation.Engine.md) |
| **[SIEM Dashboard](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/SIEM.Dashboard.md)**<br>Log aggregation with correlation | ![3-5d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_3--5d-blue) ![Flask](https://img.shields.io/badge/Flask-000000?logo=flask) ![React](https://img.shields.io/badge/React-61DAFB?logo=react&logoColor=black) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | SIEM concepts • Log correlation • Full-stack development<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/siem-dashboard) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/siem-dashboard/learn)<br>[![siem.carterperez-dev.com](https://img.shields.io/badge/siem.carterperez--dev.com-3FB950?style=flat&logo=googlechrome&logoColor=white)](https://siem.carterperez-dev.com/) |
| **[Token Abuse Playground](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/Token.Abuse.Playground.md)**<br>15+ token vulnerabilities to exploit and fix | ![3-5d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_3--5d-blue) ![FastAPI](https://img.shields.io/badge/FastAPI-009688?logo=fastapi) ![React](https://img.shields.io/badge/React-61DAFB?logo=react&logoColor=black) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | JWT exploitation • OAuth attacks • Session security • Token forensics<br>[Learn More](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/Token.Abuse.Playground.md) |
| **[Supply Chain Attack Simulator](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/Supply.Chain.Attack.Simulator.md)**<br>Fake PyPI package dependency confusion demo | ![2-4d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_2--4d-blue) ![Python](https://img.shields.io/badge/Python-3776AB?logo=python&logoColor=white) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | Supply chain attacks • Dependency confusion • Package security • PyPI internals<br>[Learn More](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/Supply.Chain.Attack.Simulator.md) |
| **[DDoS Mitigation Tool](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/DDoS.Mitigation.Tool.md)**<br>Detect traffic spikes | ![2-4d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_2--4d-blue) ![Go](https://img.shields.io/badge/Go-00ADD8?logo=go&logoColor=white) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | DDoS detection • Rate limiting • Anomaly detection<br>[Learn More](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/DDoS.Mitigation.Tool.md) |
| **[Secrets Scanner](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/secrets-scanner)**<br>Scan codebases and git history for leaked secrets | ![1-2d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_1--2d-blue) ![Go](https://img.shields.io/badge/Go-00ADD8?logo=go&logoColor=white) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | Secret detection • Shannon entropy • HIBP k-anonymity • SARIF output<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/secrets-scanner) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/secrets-scanner/learn) |
| **[API Security Scanner](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/api-security-scanner)**<br>Enterprise API vulnerability scanner | ![3-5d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_3--5d-blue) ![FastAPI](https://img.shields.io/badge/FastAPI-009688?logo=fastapi) ![React](https://img.shields.io/badge/React-61DAFB?logo=react&logoColor=black) ![Docker](https://img.shields.io/badge/Docker-2496ED?logo=docker&logoColor=white) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | OWASP API Top 10 • ML fuzzing • GraphQL/SOAP testing<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/api-security-scanner) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/api-security-scanner/learn) |
| **[Wireless Deauth Detector](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/Wireless.Deauth.Detector.md)**<br>Monitor WiFi deauth attacks | ![2-4d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_2--4d-blue) ![Rust](https://img.shields.io/badge/Rust-000000?logo=rust&logoColor=white) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | Wireless security • Packet sniffing • Attack detection<br>[Learn More](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/SYNOPSES/intermediate/Wireless.Deauth.Detector.md) |
| **[Credential Enumeration](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/credential-enumeration)**<br>Post-exploitation credential collection | ![2-4d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_2--4d-blue) ![Nim](https://img.shields.io/badge/Nim-FFE953?logo=nim&logoColor=black) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | Credential extraction • Browser forensics • Red team tooling • Nim language<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/credential-enumeration) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/credential-enumeration/learn) |
| **[Binary Analysis Tool](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/binary-analysis-tool)**<br>Disassemble and analyze executables | ![3-5d](https://img.shields.io/badge/%E2%8F%B1%EF%B8%8F_3--5d-blue) ![Rust](https://img.shields.io/badge/Rust-000000?logo=rust&logoColor=white) ![Intermediate](https://img.shields.io/badge/%E2%97%8F_Intermediate-yellow) | Binary analysis • String extraction • Malware detection<br>[Source Code](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/binary-analysis-tool) \| [Docs](https://github.com/carterperez-dev/cybersecurity-projects/blob/main/PROJECTS/intermediate/binary-analysis-tool/learn)<br>[![https://elitenetwork4life.com/](https://img.shields.io/badge/elitenetwork4life.com-E8730C?style=flat&logo=googlechrome&logoColor=white)](https://elitenetwork4life.com/) |

---

[Read more](https://github.com/carterperez-dev/cybersecurity-projects)
Download Tool