🐍 Python Cybersecurity Toolset & Automation Suite

📌 Overview

This repository contains four custom Python security tools developed for web application security analysis, host-based integrity monitoring, network inspection, and passive OSINT reconnaissance.

---

🛠️ Included Security Tools

1. 📊 Web Security Log & Payload Parser (/log-parser-project)

• File: parser.py | Target Data: access.log
• Core Functionality:
  • Scans web server logs for malicious payload signatures using regular expressions:
    • SQL Injection (SQLi): ' OR 1=1'
    • Cross-Site Scripting (XSS): <script>
    • Directory Traversal / LFI: ../, /etc/passwd
  • Tracks request rates per source IP to flag brute-force attempts exceeding configurable thresholds (BRUTE_FORCE_THRESHOLD = 5).
  • Exports parsed security alerts directly to structured JSON (alerts_report.json).

---

2. 🔍 Cryptographic File Integrity Monitor (/file-integrity-monitor)

• File: fim.py | Storage: baseline.json
• Core Functionality:
  • Computes SHA-256 cryptographic hashes for files residing in a designated directory (monitored_folder).
  • Efficiently streams large binary/text files by processing data in 4KB chunks.
  • Creates and maintains a JSON state file (baseline.json) to detect unauthorized modifications or webshell creation (webshell.php).

---

3. 🌐 Cleartext & Protocol Packet Sniffer (/network-packet-sniffer)

• File: sniffer.py
• Core Functionality:
  • Utilizes Scapy to perform real-time layer-3 and layer-4 packet dissection (IP, TCP, UDP, Raw).
  • Specifically targets insecure cleartext protocols: HTTP (Port 80), FTP (Port 21), and TELNET (Port 23).
  • Dynamically highlights unencrypted transmission streams in terminal console output.

---

4. 🕵️ Shodan OSINT Recon & Automated Reporting Tool (/shodan-recon-tool)

• File: recon.py | Output: recon_report.md
• Core Functionality:
  • Integrates with the official Shodan REST API (shodan.Shodan()) to perform passive reconnaissance against target host IPs.
  • Extracts target metadata including Organization (org), Operating System (os), Geographic Location, Open Ports, Service Banners, and CVE Vulnerabilities.
  • Automatically compiles findings into a formatted Markdown report (recon_report.md).

---

💻 Tech Stack & Dependencies

• Languages: Python 3
• Libraries: scapy, shodan, hashlib, json, re, sys
• OS Environment: Kali Linux (VMware Workstation)