hacking-education

PDF weak password cracker for authorized security testing and educational purposes — PyPDF2 wordlist audit of password-protected PDFs.

Modular Java penetration-testing scanner: port scanning, service enumeration, banner grabbing, OS detection, web/SSL-TLS analysis, DNS enumeration, and HTML/PDF reports.

Lightweight async SSH security auditing tool — banner grabbing, service reachability, target validation, and lab-only credential-file testing for hosts you own or are authorized to assess.

VLAN-hopping exploits - double-tagging and switch-spoofing experiments on lab switches.

Cybersecurity education platform in TypeScript/Next.js — interactive hacking challenges, courses, quizzes, gamified progress, admin CMS, Supabase backend.

Password strength analyzer and hash auditor — lints passwords against policy and audits SHA-256/SHA-1/MD5 hashes with wordlists for authorized security testing and education.

Webshell generator - obfuscated PHP/ASP/Java shells and detection-evasion demos for labs.

DNS-based subdomain enumeration tool for authorized security testing and educational purposes

Web hardening checker with remediation guidance for authorized security testing

A lightweight, educational process inspector for Linux that dives into /proc, processes, and File Descriptors.

FTP security auditing tool for authorized security testing and educational purposes

Static cybersecurity awareness and education website — CyberGuardians service showcase with privacy policy and terms, MIT-licensed.

HackTheBox lab walkthroughs and solutions — step-by-step enumeration, exploitation, privilege escalation, and post-exploitation notes for HTB machines and challenges.

Crypto attacks + credential cracking - hash identify/crack with rules, RSA/AES/DH attacks, cipher auto-decode, XTS-CPA.

PicoCTF challenge solutions and writeups

Adversarial LLM prompt-injection & jailbreak testing framework — 37 techniques, OWASP/NIST/MITRE ATLAS benchmarks, cost-aware, SARIF reports

Data exfiltration simulator for lab environments — chunked HTTP POST exfil over base64 JSON to a listener you control. Educational red/blue-team security training.

Credential attack orchestrator — lockout-aware password spraying and brute-force against built-in localhost lab services (HTTP, FTP, SSH, SNMP, SMTP), dry-run by default with optional --live lab mode.

Modbus ICS scanner - register mapping and function-code probing for SCADA security assessment.

Honeypot stack - multi-service decoys with session capture and attacker-playbook replay.