mchyasn/Cybersecurity-Home-Lab

Python

2

100 commits

updated Jul 12, 2025

See the code

README

275119218-d1397fe6-99fa-4913-b2c4-159e3180131b

Got a question? Fire away—I'm always open to chat and share insights!

Fun fact: You can totally skydive without a parachute... but only once.

My Contributions 🐍 Game


snake eating my contributions




Banner

Cybersecurity Home Lab — Built from Scratch

This is my personal cyber lab. No bootcamps, no lectures — just bare-metal setups, VMs on fire, logs screaming, and scripts that do damage (or fix it). I built this thing to learn, to test, to break stuff, and to defend it too.

Learn by doing. Break by choice. Fix because you understand it.


What This Is

  • Simulated enterprise network
  • Custom-built blue/red/purple team ops
  • Infrastructure I control top to bottom
  • Threats I launch — detections I tune
  • Full stack: Windows, Linux, cloud, and hybrid

Infra Breakdown

LayerWhat's Running
HypervisorsProxmox + VMware
VMsWin10, WinServer, Kali, Mint, Ubuntu, Fedora, Security Onion
NetworkingVLANs, firewalls, pfSense, OPNsense, NAT, Tailscale
MonitoringGrafana, Prometheus, Zabbix, Uptime Kuma
SIEM/SecOpsWazuh, Splunk, Elastic Stack, Security Onion
CloudAWS EC2 + Terraform + Tailscale subnet routing

Directory Structure

Cybersecurity_Home_Lab/ ├── 00_Resources_and_Tools ├── 01_OS_Installations ├── 02_Networking_Basics ├── 03_Windows_Lab ├── 04_Linux_Lab ├── 05_Vulnerable_Machines ├── 06_Attack_Tools ├── 07_Defensive_Tools ├── 08_Threat_Detection ├── 09_Log_Analysis ├── 10_Network_Monitoring ├── 11_SIEM_Setup ├── 12_IDS_IPS ├── 13_Honeypots ├── 14_Incident_Response ├── 15_Active_Directory_Labs ├── 16_Red_Team_Exercises ├── 17_Blue_Team_Exercises ├── 18_Reverse_Engineering ├── 19_Malware_Analysis ├── 20_Forensics_Labs ├── 21_Cloud_Security ├── 22_Web_App_Security ├── 23_Wireless_Attacks ├── 24_DevSecOps ├── 25_SOC_Automation ├── 26_Threat_Intelligence ├── 27_Pentesting_Projects ├── 28_GRC_and_Policies ├── 29_Cyber_Learning_Resources ├── 30_Reports_and_Writeups


Tools I Bleed With

  • Nmap, Hydra, Burp, Metasploit, CrackMapExec
  • Suricata, Zeek, Wazuh, Fail2Ban, Sysmon
  • Splunk, Kibana, ELK Stack, Grafana
  • Kali, Parrot, C2s, shells, exfil scripts
  • Ghidra, x64dbg, radare2, Wireshark
  • AWS, Terraform, Tailscale, EC2 playground
  • Bash, PowerShell, Python, YAML, crontabs

Projects That Slap

  • Full AD lab w/ DC, DNS, DHCP, GPOs — joined clients, simulated attacks
  • Splunk SIEM catching brute force + recon from inside
  • AWS cloud defense lab — Terraform infra + subnet cloaking w/ Tailscale
  • Honeypots w/ T-Pot + Wazuh + reverse traffic analytics
  • Purple team detection logic: simulate -> trigger -> alert -> document
  • Malware reverse-engineering on isolated boxes
  • Custom GRC docs, password policies, SOC runbooks

Why I Built This

Certs? I’ve got some. But this is where I actually learn.

This lab runs 24/7. When I break something, I fix it. When I get owned, I analyze the logs. This is where I sharpen my tools and my mindset — and I don’t stop.


Areas Covered

  • Networking & VLANs
  • Windows AD + GPOs
  • Linux internals & hardening
  • Web app attacks
  • Log collection + analysis
  • Threat detection & alerting
  • SIEM correlation rules
  • CTFs, payloads, privilege escalation
  • Cloud and DevSecOps
  • Reverse engineering and malware teardown

Connect


“There’s no patch for human curiosity.”

Contributors

mchyasn

100 commits

mchyasn/Cybersecurity-Home-Lab

Python

2

100 commits

updated Jul 12, 2025

See the code

README

275119218-d1397fe6-99fa-4913-b2c4-159e3180131b

Got a question? Fire away—I'm always open to chat and share insights!

Fun fact: You can totally skydive without a parachute... but only once.

My Contributions 🐍 Game


snake eating my contributions




Banner

Cybersecurity Home Lab — Built from Scratch

This is my personal cyber lab. No bootcamps, no lectures — just bare-metal setups, VMs on fire, logs screaming, and scripts that do damage (or fix it). I built this thing to learn, to test, to break stuff, and to defend it too.

Learn by doing. Break by choice. Fix because you understand it.


What This Is

  • Simulated enterprise network
  • Custom-built blue/red/purple team ops
  • Infrastructure I control top to bottom
  • Threats I launch — detections I tune
  • Full stack: Windows, Linux, cloud, and hybrid

Infra Breakdown

LayerWhat's Running
HypervisorsProxmox + VMware
VMsWin10, WinServer, Kali, Mint, Ubuntu, Fedora, Security Onion
NetworkingVLANs, firewalls, pfSense, OPNsense, NAT, Tailscale
MonitoringGrafana, Prometheus, Zabbix, Uptime Kuma
SIEM/SecOpsWazuh, Splunk, Elastic Stack, Security Onion
CloudAWS EC2 + Terraform + Tailscale subnet routing

Directory Structure

Cybersecurity_Home_Lab/ ├── 00_Resources_and_Tools ├── 01_OS_Installations ├── 02_Networking_Basics ├── 03_Windows_Lab ├── 04_Linux_Lab ├── 05_Vulnerable_Machines ├── 06_Attack_Tools ├── 07_Defensive_Tools ├── 08_Threat_Detection ├── 09_Log_Analysis ├── 10_Network_Monitoring ├── 11_SIEM_Setup ├── 12_IDS_IPS ├── 13_Honeypots ├── 14_Incident_Response ├── 15_Active_Directory_Labs ├── 16_Red_Team_Exercises ├── 17_Blue_Team_Exercises ├── 18_Reverse_Engineering ├── 19_Malware_Analysis ├── 20_Forensics_Labs ├── 21_Cloud_Security ├── 22_Web_App_Security ├── 23_Wireless_Attacks ├── 24_DevSecOps ├── 25_SOC_Automation ├── 26_Threat_Intelligence ├── 27_Pentesting_Projects ├── 28_GRC_and_Policies ├── 29_Cyber_Learning_Resources ├── 30_Reports_and_Writeups


Tools I Bleed With

  • Nmap, Hydra, Burp, Metasploit, CrackMapExec
  • Suricata, Zeek, Wazuh, Fail2Ban, Sysmon
  • Splunk, Kibana, ELK Stack, Grafana
  • Kali, Parrot, C2s, shells, exfil scripts
  • Ghidra, x64dbg, radare2, Wireshark
  • AWS, Terraform, Tailscale, EC2 playground
  • Bash, PowerShell, Python, YAML, crontabs

Projects That Slap

  • Full AD lab w/ DC, DNS, DHCP, GPOs — joined clients, simulated attacks
  • Splunk SIEM catching brute force + recon from inside
  • AWS cloud defense lab — Terraform infra + subnet cloaking w/ Tailscale
  • Honeypots w/ T-Pot + Wazuh + reverse traffic analytics
  • Purple team detection logic: simulate -> trigger -> alert -> document
  • Malware reverse-engineering on isolated boxes
  • Custom GRC docs, password policies, SOC runbooks

Why I Built This

Certs? I’ve got some. But this is where I actually learn.

This lab runs 24/7. When I break something, I fix it. When I get owned, I analyze the logs. This is where I sharpen my tools and my mindset — and I don’t stop.


Areas Covered

  • Networking & VLANs
  • Windows AD + GPOs
  • Linux internals & hardening
  • Web app attacks
  • Log collection + analysis
  • Threat detection & alerting
  • SIEM correlation rules
  • CTFs, payloads, privilege escalation
  • Cloud and DevSecOps
  • Reverse engineering and malware teardown

Connect


“There’s no patch for human curiosity.”

Contributors

mchyasn

100 commits

Languages

Python

47.3%

HTML

29.4%

Visual Basic .NET

7.5%

C++

6.2%

HCL

3.7%

Shell

1.7%

JavaScript

1.4%