Month 5 Capstone: Your Ethical Hacker Toolkit Demonstration

This capstone brings the cyber-security month together into one demonstration. You will design a red-team scenario using at least two of the month's tools, run it entirely on your own equipment in a controlled way, and record a short showcase. The goal is to prove you understand how these tools work and how to defend against them, always ethically, always on systems you own or are explicitly permitted to test.

What you have learned this month

Over this month you gained practical, real-world knowledge of cyber-security tools, techniques, and, most importantly, defenses. You learned how HID injection, wireless signals, wearable cameras, and social engineering work, and how each is countered. The capstone asks you to combine that understanding into a single coherent demonstration that shows both the technique and the defense, on your own equipment.

How your project is judged

A complete capstone is a red-team demonstration using at least two tools from the month, simulating a realistic but ethical scenario on equipment you own. It should clearly show which tools you used, what scenario you simulated, and what you learned, including the defense that would stop the technique. The strongest projects pair every offensive step with its countermeasure, because the point is to understand and protect, not to exploit.

Working through it

Choose your scenario and tools. Pick at least two tools and an ethical scenario you can run entirely on your own equipment, such as scanning your own room for clues then delivering a harmless payload on your own machine, or spoofing your own wireless sensor to trigger a response.

Set up a controlled test. Stage everything in a closed lab or on devices you own, so nothing touches systems or networks you are not permitted to test.

Run and document each step. Perform the scenario, recording what each tool did and pairing every step with the defense that would prevent it.

Capture what you learned. Note the key takeaway, especially how a defender would detect or stop your demonstrated technique.

Record and share the showcase. Make a one-to-two-minute video showing the tools, the scenario, and your lessons, and share it with the community.

Capstone requirements and ethics checklist

# Ethical Hacker Toolkit Demonstration requires:
#  [ ] at least 2 of: XIAO ESP32-S3 Sense, T-Dongle, T-Embed
#  [ ] a realistic but ETHICAL simulated scenario
#  [ ] run ONLY on equipment you own or are permitted to test
#  [ ] each offensive step paired with its defense
#  [ ] a 1-2 minute showcase video

# non-negotiable rules:
#  - never test devices, networks, or systems you do not own
#  - respect privacy and legal boundaries at all times
#  - practice responsible disclosure if you find a real vulnerability

The checkboxes are the requirements; the rules below them are absolute. Pairing each technique with its defense is what turns the project from a stunt into genuine security learning.

Common mistakes and troubleshooting

Running the scenario on a device or network you do not own. Only ever use your own equipment or systems you have explicit permission to test.

Showing the attack without the defense. Pair every offensive step with its countermeasure; the defense is the point.

Ignoring privacy in a wearable-camera scenario. Keep it to yourself and your own space, with consent from anyone in view.

Not disclosing a real vulnerability responsibly. If you find a genuine flaw, report it responsibly rather than exploiting or publicizing it.

Next: This completes the five months. The finale is Month 6: 3D printing and building the TARS robot, which brings together everything you have learned.