SecLab Toolkit (Security Labs Toolkit) is a Python-based cybersecurity learning and simulation framework designed for students, beginners, and security enthusiasts.
The toolkit combines multiple cybersecurity concepts into a single command-line interface (CLI) platform to provide practical exposure to:
- Cryptography
- Password Security
- Honeypot Simulation
- Phishing Awareness
- SQL Injection Demonstrations
- Logging and Monitoring
- Ethical Hacking Concepts
The project focuses on hands-on learning through interactive demonstrations and simulated security environments. It is intended strictly for educational, research, and cybersecurity practice purposes.
- Modular cybersecurity toolkit
- Interactive CLI-based interface
- Cryptography demonstrations
- Password analysis and generation tools
- SSH honeypot simulation
- Security logging and monitoring
- Educational phishing demo
- SQL Injection practice environment
- Beginner-friendly implementation
- Real-world cybersecurity concepts
- Python
- Paramiko
- Socket Programming
- PyCryptodome
- OpenCV
- Logging
- Threading
- File Handling
SecLab-Toolkit/
│
├── cryptography/
│ ├── aes_demo.py
│ ├── rsa_demo.py
│ ├── digital_signature_demo.py
│ ├── secure_file_encryptor.py
│ ├── caesar_cipher.py
│ ├── vigenere_cipher.py
│ ├── base64_encoder_decoder.py
│ ├── hex_encoder_decoder.py
│ ├── url_encoder_decoder.py
│ ├── hash_generator.py
│ ├── hash_identifier.py
│ ├── file_hash_checker.py
│ └── Steganography.py
│
├── password_tools/
│ ├── generator.py
│ ├── strength.py
│ ├── password_entropy_calculator.py
│ ├── commonpassworddetector.py
│ └── attack_simulator.py
│
├── honeypot/
│ ├── honeypot.py
│ ├── audits.log
│ ├── cmd_audits.log
│ └── server_key
│
├── phishing_demo/
│
├── sql_injection_demo/
│
├── main.py
└── README.mdgit clone https://github.com/murariguna/SECLAB.git
cd SECLABpip install -r requirements.txtRun the main toolkit interface:
python main.pyYou can also execute individual tools directly:
python aes_demo.py| Module | Description |
|---|---|
| Cryptography | Encryption, hashing, encoding, digital signatures, steganography |
| Password Security | Password generation, entropy analysis, strength testing |
| Honeypot | SSH honeypot simulation and monitoring |
| Phishing Demo | Educational phishing simulation |
| SQL Injection Demo | SQL Injection attack and prevention demo |
| Logging & Monitoring | Tracks activity and simulated attacks |
The Cryptography Module demonstrates both classical and modern cryptographic techniques including encryption, hashing, encoding, digital signatures, and steganography.
Demonstrates AES (Advanced Encryption Standard) symmetric encryption and decryption using CBC mode.
- AES encryption
- AES decryption
- 16-character key validation
- CBC mode implementation
- Secure communication
- File protection
- Learning symmetric encryption
Demonstrates RSA asymmetric encryption using public and private keys.
- RSA key generation
- Public key encryption
- Private key decryption
- Secure key exchange
- Public-key cryptography learning
- Encryption demonstrations
Demonstrates how digital signatures work using RSA and SHA-256.
- RSA key generation
- Message signing
- Signature verification
- SHA-256 hashing
- Digital signature learning
- Data authenticity verification
- Integrity checking
Encrypts and decrypts files securely using AES encryption.
- File encryption
- File decryption
- AES-CBC encryption mode
- Secure file handling
- File protection
- Secure data storage
- Encryption practice
Implements the classical Caesar substitution cipher.
- Encode messages
- Decode messages
- Adjustable shift value
- Learning classical cryptography
- Cipher analysis practice
Implements the Vigenère polyalphabetic cipher using keyword-based encryption.
- Keyword-based encryption
- Encoding and decoding support
- Classical cryptography learning
- Encryption analysis
Encodes and decodes Base64 text data.
- Base64 encoding
- Base64 decoding
- Data transmission
- Encoding binary data into text
Encodes and decodes hexadecimal strings.
- Hex encoding
- Hex decoding
- Binary analysis
- Low-level data representation
Performs URL-safe encoding and decoding.
- URL encoding
- URL decoding
- Web application testing
- HTTP request analysis
Generates SHA-256 hashes for passwords or text.
- SHA-256 hashing
- Password hashing
- Integrity verification
Identifies common hash algorithms based on pattern and length.
- MD5 detection
- SHA-1 detection
- SHA-256 detection
- SHA-512 detection
- Hash analysis
- Digital forensics learning
Calculates hashes of files for integrity verification.
- MD5 hashing
- SHA-1 hashing
- SHA-256 hashing
- File integrity checking
- Malware analysis
- Digital forensics
Hides secret messages inside images using LSB (Least Significant Bit) steganography.
- Message hiding in images
- Password-protected retrieval
- LSB encoding technique
- Covert communication
- Steganography learning
- Cybersecurity demonstrations
The Password Security Module focuses on password generation, password auditing, strength analysis, and password attack simulations.
Generates secure random passwords based on user preferences.
- Custom password generation
- Random password generation
- Configurable character sets
- Secure password creation
- Password management practice
Analyzes password complexity and determines its security level.
- Weak/Moderate/Strong classification
- Common password detection
- Password auditing
- Security awareness training
Calculates password entropy in bits.
- Entropy calculation
- Character set analysis
- Password security measurement
- Cryptography education
Checks whether a password exists in a common-password dictionary.
- Dictionary-based password analysis
- Weak password detection
- Security awareness
Simulates password guessing and brute-force behavior for educational purposes.
- Password guessing simulation
- Randomized attack attempts
- Demonstrates brute-force principles
- Ethical hacking demonstrations
- Password security awareness
- Cybersecurity education
The Honeypot Module simulates an SSH server to monitor and log attacker activity.
A simulated SSH server that records login attempts and commands executed by attackers.
- SSH server emulation
- Fake shell environment
- Credential logging
- Command logging
- Real-time monitoring
- Rotating audit logs
- IP addresses
- Usernames
- Password attempts
- Executed commands
audits.logcmd_audits.logserver_key
pwdwhoamilscat jumpbox1.confexit
- Threat monitoring
- Attack analysis
- Cybersecurity education
- Honeypot research
The Phishing Awareness Module demonstrates how phishing websites trick users into revealing sensitive information.
- Fake login page simulation
- Credential capture demonstration
- Awareness-based learning
- Social engineering simulation
- Educational warning messages
- Cybersecurity awareness training
- Social engineering demonstrations
- Phishing attack education
- Ethical hacking demonstrations
The SQL Injection Demo demonstrates how insecure database queries can be exploited and how secure coding practices prevent attacks.
- Vulnerable login simulation
- SQL Injection payload testing
- Authentication bypass demonstration
- Secure query comparison
- Input sanitization examples
- Web security education
- Secure coding demonstrations
- Ethical hacking practice
- Vulnerability analysis learning
The toolkit includes logging systems to monitor simulated activity and attacker behavior.
| File | Purpose |
|---|---|
| audits.log | Connection and activity logs |
| cmd_audits.log | Command execution logs |
This toolkit is created strictly for:
- Educational purposes
- Ethical hacking practice
- Cybersecurity learning
- Security research
- Demonstration environments
Do not use this toolkit against systems you do not own or have permission to test.
- GUI-based interface
- Web dashboard
- Network scanner integration
- Packet sniffer module
- Malware analysis sandbox
- Advanced logging dashboard
- AI-assisted threat analysis
- Multi-user support
Developed by Satya Murari Guna
This project is intended for educational and research purposes only.
Use responsibly and ethically.