🛠️ 04 Projects¶
Hands-on attack/defense labs and a capstone design project that turn the notes into practiced skill. Most labs use a small Linux VM setup (attacker + victim, or attacker + victim + router) — see each project's Setup section for exact requirements.
| # | Project | Type | Primary module(s) | Difficulty |
|---|---|---|---|---|
| 01 | Packet Sniffing & ARP Spoofing Lab | Attack lab | 03 | ⭐⭐ |
| 02 | TCP/IP Attack Lab | Attack lab | 02, 04 | ⭐⭐⭐ |
| 03 | Firewall Configuration Lab | Defense lab | 05 | ⭐⭐⭐ |
| 04 | DNS Cache-Poisoning Attack Lab | Attack lab | 06 | ⭐⭐⭐⭐ |
| 05 | VPN Tunnel Setup Project | Build/design | 07, 08 | ⭐⭐⭐ |
| 06 | TLS/HTTPS Certificate Deployment | Build/design | 07, 09 | ⭐⭐⭐ |
| 07 | ML-Based Intrusion Detection System | Data/ML | 10 | ⭐⭐⭐⭐ |
| 08 | Capstone: Secure Network Design | Design | 05, 06, 08, 10 | ⭐⭐⭐⭐⭐ |
🧭 Module Coverage¶
| Module | Projects |
|---|---|
| 02 TCP/IP Protocols | 02 |
| 03 Sniffing, Spoofing & MITM | 01 |
| 04 TCP/IP Attacks | 02 |
| 05 Firewalls & Access Control | 03, 08 |
| 06 DNS & DNS Security | 04, 08 |
| 07 Cryptography Fundamentals | 05, 06 |
| 08 VPN & Secure Tunneling | 05, 08 |
| 09 TLS/SSL & Secure Communication | 06 |
| 10 Intrusion Detection & ML | 07, 08 |
🧰 Tools¶
- A Linux VM (Ubuntu/Kali/SEED Labs VM all work) — projects 01–04 need at least two VMs on the same virtual network (attacker + victim).
- Wireshark / tcpdump — capturing and reading traffic for projects 01, 02, 04, 06.
- iptables — project 03.
- OpenVPN or WireGuard — project 05.
- OpenSSL — project 06.
- Python 3 + pandas + scikit-learn — project 07.
Lab VM disk images,
.pcapcaptures, and dataset files are git-ignored — commit your write-ups, configs, and reports; keep large binary artifacts local.
📍 Suggested Order¶
- 01 → 02 — foundational attacks (sniffing/spoofing, then TCP/IP attacks) while Modules 02–04 are fresh.
- 03 — firewalls, right after seeing what they need to defend against.
- 04 — DNS attacks, after finishing Module 06's notes.
- 05 → 06 — VPN and TLS, once Module 07 (cryptography) is done.
- 07 — the ML-based IDS, anytime after Module 10.
- 08 — the capstone, last — it deliberately combines firewalls, DNS hardening, VPN, and IDS into one design.