A modular cybersecurity toolkit for network reconnaissance, featuring an integrated FastAPI-powered web interface.
Cyber Toolkit is a lightweight yet powerful security tool designed to perform essential reconnaissance tasks through a clean web-based interface.
Unlike traditional setups, this project runs entirely on the backend — FastAPI serves both the API and the frontend UI, eliminating the need for a separate frontend server.
It combines multiple security utilities into a single dashboard, making it easy to:
- Scan networks
- Discover subdomains
- Enumerate directories
- Download files
—all from one place.
Browser (UI)
↓
FastAPI Server (Backend)
├── API Routes (/api/*)
├── Static UI (served via /static)
└── Modules
├── ARP Scanner
├── Subdomain Enum
├── Directory Enum
└── Downloader
✔ Single server
✔ No frontend deployment needed
✔ Real-time interaction via API
- Discover active devices on a network
- Displays IP ↔ MAC mapping
- Brute-force subdomains using wordlists
- Multi-threaded for fast execution
- Finds hidden endpoints on websites
- Detects
200 OKand403 Forbidden
- Download files directly from URLs
- Supports multiple file types
- Served directly via FastAPI (
/) - No separate frontend server required
- Clean, modern dashboard
| Layer | Technology |
|---|---|
| Backend | FastAPI (Python) |
| UI Serving | FastAPI StaticFiles |
| Networking | Scapy |
| Requests | Python Requests |
Cyber-toolkit/
│
├── backend/
│ ├── main.py
│ ├── requirements.txt
│ ├── wordlist.txt
│ │
│ ├── modules/
│ │ ├── arp.py
│ │ ├── subdomain.py
│ │ ├── dir_enum.py
│ │ └── downloader.py
│ │
│ └── static/
│ ├── index.html
│ ├── style.css
│ └── app.js
│
├── screenshots/
│ ├── arp.png
│ ├── Subdomain.png
│ ├── Dir_En.png
│ └── download.png
│
└── README.md
git clone https://github.com/Devansh7006/ToolKit.git
cd ToolKit/backendpip install -r requirements.txtuvicorn main:app --reloadhttp://127.0.0.1:8000
✅ UI + API both run from here
All endpoints are prefixed with /api
| Endpoint | Description |
|---|---|
/api/arp |
Network scan |
/api/subdomain |
Subdomain enumeration |
/api/dir |
Directory brute-force |
/api/download |
File downloader |
This tool is developed strictly for educational and ethical purposes only.
Do NOT use it on networks or systems without proper authorization.
Devansh Goyal
- GitHub: https://github.com/Devansh7006



