A lightweight yet powerful LAN Monitoring & Cybersecurity Platform designed to detect unauthorized devices, monitor system activity, and provide administrators with real-time network visibility.
🚀 Built as a final-year project demonstrating practical implementation of cybersecurity, network monitoring, and SOC-style systems.
| Login page | Dashboard |
|---|---|
 |
 |
| Scan Port | Logs Viewer |
 |
 |
✔ Real-time device monitoring
✔ LAN network discovery (ARP + Ping scanning)
✔ Rogue / unauthorized device detection
✔ Duplicate IP & spoofing detection
✔ Trusted device approval system
✔ Live SOC-style dashboard
✔ Port scanning with risk classification
✔ PDF security report generation
✔ CPU & RAM monitoring of client systems
✔ Scan history logging (SQLite)
Client Agent (agent.py)
│
│ Sends system data every 10 seconds
▼
Flask Server (app.py)
│
├── Device Monitoring API
├── Logging & Activity Monitoring
├── Network Scanner (ARP + Ping)
├── Rogue Device Detection
├── Device Authorization Management (Approve / Disapprove)
├── Port Scanner Module
├── Report Generator (PDF)
└── Admin Dashboard (Web Interface)
│
▼
SQLite Database (sccsims.db)
| Component | Technology |
|---|---|
| Backend | Python |
| Web Framework | Flask |
| Database | SQLite |
| Network Scanning | Scapy, Socket |
| Concurrency | Multithreading(ThreadPoolExecutor) |
| Data Visualization | Matplotilib, NumPy |
| System Monitoring | psutil |
| Frontend | HTML, CSS, JavaScript |
| Reporting | ReportLab |
| Security | Werkzeug (Password Hashing) |
-
Implemented using Python’s built-in logging module
-
Tracks:
- Server activity
- Network scans
- Threat detection events
- Admin actions (approve/disapprove)
-
Logs stored in:
sccsims.log
git clone https://github.com/ByteBandit-100/SCCSIMS.git
cd SCCSIMSpip install -r requirements.txtINTERFACE = [your_system_working_interface_id]
OR
INTERFACE = None #BY DEFAULT
python app.py🌐 Access Dashboard:
http://localhost:5000
Username: admin
Password: admin123
On each client machine:
SERVER_URL = "http://SERVER_IP:5000/api/device"python agent.py📡 Device sends system data every 2 seconds*
- Detects all devices in LAN
- Tracks IP, MAC, hostname
- Real-time updates
- Rogue device detection
- Duplicate IP detection
- Unauthorized access alerts
- Multi-threaded scanning
- Risk classification (LOW / HIGH)
- Live scan updates
- Professional PDF reports
- Risk highlighting (RED for HIGH)
- Summary + recommendations
- Network Discovery
- Device Fingerprinting
- Rogue Device Detection
- Port Vulnerability Analysis
- Real-Time Monitoring
- Basic SOC (Security Operations Center) Design
🔥 SOC-style dashboard (rare in student projects)
🔥 Terminal + Web hybrid monitoring
🔥 Real-time threat detection
🔥 Automated PDF reporting system
- Works only in LAN environment
- No advanced IDS (Snort/Suricata level)
- No encrypted communication between agent & server
- Basic authentication system
- Intrusion Detection System (IDS)
- ARP spoofing protection
- WebSocket real-time updates
- Role-based authentication
- Network topology visualization
- Cloud deployment support
Mohit (ByteBandit-100)
Feel free to fork, improve, and submit pull requests!
This project is for educational purposes.
This project demonstrates how cybersecurity concepts can be implemented in a real-world mini SOC system, making it highly suitable for academic and practical learning.