🛡️ PactX v1.0

Cross-Platform Threat & Patch Engine for Windows & Linux

█████  ████  █████  █████ █   █
█   █  █  █  █        █    █ █ 
█████  ████  █        █     █  
█      █  █  █        █    █ █ 
█      █  █  █████    █   █   █

:: CROSS-PLATFORM THREAT & PATCH ENGINE :: ──────────────────────────────────────────────── PactX is a fast, unprivileged local vulnerability auditor written in Python. It scans installed applications on Windows and Linux systems and correlates them against live threat intelligence from the CISA Known Exploited Vulnerabilities (KEV) catalog—helping system administrators and security researchers identify actively exploited software before an attack lands.

---

✨ Features

• Cross-Platform Intelligence: Automatically detects OS architecture (dpkg on Debian/Ubuntu/Kali; PowerShell registry enumeration on Windows).
• Live Threat Feed Integration: Fetches and caches active zero-day and CVE definitions directly from CISA KEV feeds.
• Smart Noise Reduction: Filters out software false positives, development runtime libraries (-data, -doc, -common), and drivers to highlight high-impact targets.
• Zero Third-Party Dependencies: Built entirely with standard Python 3 modules (subprocess, urllib, json, re).
• Hardened Execution: Engineered without shell command invocation (shell=False) to prevent injection vulnerabilities during local audits.

---

🚀 Quick Start

Prerequisites

• Python 3.8+ installed on your host system.

Running PactX

1. Clone the Repository: bash git clone https://github.com/Arif-PySec/PactX.git

2. Execute the Auditor:

• Linux (Ubuntu / Debian / Kali): bash python3 PactX.py

• Windows (PowerShell or Command Prompt): cmd python PactX.py

---

📊 Sample Executive Report Output

        🛡️  PACTX EXECUTIVE SECURITY REPORT                

======================================================================

[⚠️] CRITICAL ATTENTION REQUIRED: Potential Threat Match(es) Identified!

[1] Target Application : apache2 (Version: 2.4.52) ├─ Vulnerability CVE : CVE-2023-25690 ├─ CISA Description : Apache HTTP Server Request Smuggling Vulnerability └─ CISA Action Notice : Apply updates per vendor instructions. [🔧 IMMEDIATE REMEDIATION COMMANDS] Run the following to patch all system packages: 👉 sudo apt update && sudo apt upgrade -y

---

🛡️ Security & Scope

PactX is designed strictly as a read-only local auditing utility:

• Does NOT require root, sudo, or Administrator privileges.
• Opens zero listening ports and runs no background services.
• Performs standard outbound HTTPS GET requests strictly to official CISA JSON endpoints.

---

📜 License

Distributed under the MIT License. Free for educational, research, and open-source use