A modular, scalable collection of custom Python utilities developed to explore network socket communications, low-level system events, and malware mechanics from an analytical perspective.
This repository focuses on understanding how security tools work under the hood:
- Low-Level Socket Programming: Understanding raw network handshakes, port probing, and connection handling.
- System-Level Hooks: Analyzing host event monitoring, logging mechanics, and local execution behaviors.
- Analytical Defense: Studying offensive mechanics in order to build better detection strategies and security controls.
I organize my tools by domain category to ensure scalability as new security utilities are added:
network/port-scanner/— Multi-threaded port scanner for discovering active network services and probing TCP sockets.
monitoring/keylogger/— Educational keystroke event logger examining input hooks, configuration loading, and log handling mechanics.
- Language: Python 3.x
- Core Modules:
socket,threading,sys,json,logging - Third-Party Libraries:
pynput
This repository is created strictly for educational, analytical, and authorized research purposes. All tools are intended to be executed only within isolated lab environments and target infrastructure you own or have explicit permission to test.