Skip to content
BranchesTags

Repository files navigation

Z-TOOL Security Framework



Version Python Platform License Stars Forks Last Commit


Z-TOOL is a comprehensive security framework built for ethical hacking, penetration testing, and security research. It combines 10 powerful security modules into one integrated platform with a premium, modern CLI interface.


🚀 Get Started · 📦 Modules · 📋 Requirements · ⭐ Support

📋 Table of Contents

🚀 Features

🔐 Security & Protection

Feature Description
Hardware Binding License License tied to unique hardware ID
HMAC Signature Validation Protection against license forgery
Blacklist System Ability to revoke licenses in real-time
Encrypted Backup Encrypted license backup
Usage Tracking License usage monitoring

🎯 Security Modules

Module Description Features
PHISX Advanced phishing framework 10+ templates
Password Attack Password cracking suite 15+ attack methods
WiFi Attack Wireless security testing 8 attack vectors
Social Engineering Social engineering toolkit 12 attack types
Vulnerability Analysis Security vulnerability scanner 13 scan types
Web Panel LocalHost web interface Full dashboard
Telegram & Discord Social media OSINT 7+ info types
DDoS Simulation Attack simulation 6 attack types
Forensic Tool Digital forensics 12 analysis tools
Optimizer System optimization 9 optimization features

💻 Cross-Platform Support

  • ✅ Linux (Ubuntu, Debian, Kali, Arch, Fedora)
  • ✅ Windows (10, 11, Server)
  • ✅ macOS (Intel, Apple Silicon)
  • ✅ Android (Termux)
  • ✅ Raspberry Pi

📦 Modules

1. PHISX — Phishing Framework

Advanced phishing framework with a wide variety of templates and full customization support.

Features:

  • 10+ ready-to-use phishing templates
  • Custom template creator
  • Built-in HTTP server with credential logging
  • Multi-port support
  • Session management
  • Automated credential harvesting

Available Templates:

Template Target Special Feature
Facebook Facebook Login Email/Password capture
Instagram Instagram Login Username/Password capture
Google Google Account OAuth simulation
Twitter/X Twitter Login Username/Password
GitHub GitHub Auth Token harvesting
Microsoft Microsoft/Outlook 2FA simulation
PayPal PayPal Login Payment info
Netflix Netflix Account Subscription info
Spotify Spotify Login Premium account
Custom Customizable Fully customizable

Usage:

# Select menu 1 (PHISX)
# Choose desired template
# Set port (default 8080)
# Server runs at http://localhost:8080
# Send link to target
# Credentials saved to data/logs/phishx_credentials.log

2. Password Attack — Password Cracking Suite

A complete suite for password cracking with multiple attack methods.

Attack Methods:

No Method Description Target
1 SSH Brute Force Brute force SSH service SSH Port 22
2 FTP Brute Force Brute force FTP service FTP Port 21
3 MySQL Brute Force Brute force MySQL database MySQL Port 3306
4 PostgreSQL Brute Force Brute force PostgreSQL PostgreSQL Port 5432
5 HTTP Form Brute Force Brute force web login forms HTTP/HTTPS
6 Hash Cracker Crack hash values MD5, SHA1, SHA256, NTLM
7 Dictionary Attack Dictionary-based attack All services
8 Mask Attack Pattern-based attack Custom patterns
9 Hybrid Attack Dictionary + mutations All services
10 Rainbow Table Attack Pre-computed hash lookup MD5, SHA1
11 Telnet Brute Force Brute force Telnet Port 23
12 SMTP Brute Force Brute force SMTP Port 25, 465, 587
13 POP3/IMAP Brute Force Brute force email Port 110, 143, 993, 995
14 Wordlist Generator Generate custom wordlists —
15 Password Strength Checker Check password security —

Available Wordlists:

  • default.txt — Common passwords
  • common.txt — Most frequently used passwords
  • passwords.txt — Full password database
  • usernames.txt — Common username database
  • rockyou.txt — Famous RockYou wordlist

Hash Cracker Example:

# Select menu 2 (Password Attack)
# Select submenu 6 (Hash Cracker)
# Enter hash: 5f4dcc3b5aa765d61d8327deb882cf99
# Select hash type: md5
# Select wordlist: data/wordlists/passwords.txt
# Result: password

3. WiFi Attack — Wireless Security Testing

Module for wireless network security testing.

Attack Features:

No Attack Type Description
1 WiFi Network Scanner Scan and list available WiFi networks
2 Deauthentication Attack Disconnect clients from AP
3 Handshake Capture Capture WPA/WPA2 handshake
4 WPA/WPA2 Cracking Crack WiFi password from handshake
5 Evil Twin Attack Create fake access point
6 PMKID Attack Capture and crack PMKID
7 WiFi Jammer Interfere with WiFi signals
8 Connected Devices List connected devices

Requirements:

  • Linux OS (Ubuntu/Kali/Parrot)
  • Wireless adapter with monitor mode support
  • Root privileges
  • Aircrack-ng suite installed

Usage:

# Select menu 3 (WiFi Attack)
# Select submenu 1 to scan networks
# Choose target BSSID
# Perform handshake capture
# Crack with wordlist

4. Social Engineering Toolkit

Toolkit for social engineering attack vectors.

Attack Features:

No Attack Type Description
1 Email Spoofing Send spoofed phishing emails
2 SMS Spoofing Send fake SMS messages
3 URL Shortener Obfuscate malicious URLs
4 Payload Generator Generate malicious payloads
5 Site Cloner Clone legitimate websites
6 Credential Harvester Harvest credentials via fake pages
7 QR Code Generator Generate malicious QR codes
8 Phone Spoofing Spoof caller ID
9 Social Media OSINT Gather social media info
10 Spear Phishing Targeted phishing campaigns
11 Fake Update Generator Generate fake software updates
12 USB Dropper Create autorun USB dropper

Email Templates:

  • Bank Alert — Bank security warning
  • System Alert — General system warning
  • Invoice — Fake invoice

Payload Generator Example:

# Select menu 4 (Social Engineering)
# Select submenu 4 (Payload Generator)
# Choose reverse shell
# Enter LHOST (listener IP)
# Enter LPORT
# Choose language (Python/Bash/PowerShell)
# Payload ready to use

5. Vulnerability Analysis Scanner

Comprehensive security vulnerability scanner.

Scan Features:

No Scan Type Description
1 Port Scanner Scan open ports and services
2 SQL Injection Scanner Detect SQL injection vulnerabilities
3 XSS Scanner Detect Cross-Site Scripting
4 Directory Brute Forcer Discover hidden directories
5 Subdomain Enumerator Find subdomains
6 CMS Detector Identify CMS and versions
7 SSL/TLS Checker Check SSL certificate validity
8 Full Security Scan Comprehensive vulnerability scan
9 CVE Lookup Search for known vulnerabilities
10 Security Headers Check Check HTTP security headers
11 Open Redirect Scanner Detect open redirects
12 LFI/RFI Scanner Detect file inclusion vulnerabilities
13 Generate Report Create detailed scan report

Scan Profiles:

Profile Description Duration
Quick Common ports + basic checks ~30 seconds
Normal Standard scan, all checks ~2–3 minutes
Full Comprehensive full scan ~10–15 minutes
Web Web application focused ~1–2 minutes
Network Network infrastructure ~2–3 minutes

Usage:

# Select menu 5 (Vulnerability Analysis)
# Select submenu 8 (Full Security Scan)
# Enter target URL/IP
# Wait for scan to complete
# Report saved to data/reports/

6. Web Panel — LocalHost Interface

Web interface for accessing Z-TOOL through a browser.

Features:

  • Real-time scan monitoring
  • Interactive scan results
  • Module execution via browser
  • System statistics dashboard
  • Log viewer
  • Export results (JSON/HTML)

Usage:

# Select menu 6 (Web Panel)
# Set port (default 8080)
# Open browser: http://localhost:8080
# Access features via web interface

API Endpoints:

Endpoint Method Description
/api/scan POST Run security scan
/api/results GET Get scan results
/api/modules GET List available modules
/api/stats GET Get system statistics
/api/logs GET Get system logs

7. Telegram & Discord OSINT

OSINT tools for Telegram and Discord platforms.

Telegram Features:

No Feature Description
1 User Info Lookup Get Telegram user information
2 Channel Info Get channel statistics
3 Group Info Get group information
4 Bot Info Check bot status
5 Message Scraper Scrape messages from public channels
6 Username Availability Check username availability
7 Sticker Info Get sticker pack information

Discord Features:

No Feature Description
1 User Lookup Get Discord user information
2 Server Info Get server information
3 Channel Info Get channel information
4 Bot Info Check bot status
5 Invite Info Get invite link information
6 User ID Lookup Convert username to ID
7 Token Checker Validate Discord token

Usage:

# Select menu 7 (Telegram & Discord)
# Select submenu 1 (User Info Lookup)
# Enter Telegram username
# User information will be displayed

8. DDoS Simulation

DDoS attack simulation for testing and education purposes.

Attack Types:

No Attack Type Description
1 HTTP Flood Simulate HTTP GET/POST flood
2 SYN Flood Simulate TCP SYN flood
3 UDP Flood Simulate UDP packet flood
4 Slowloris Simulate Slowloris attack
5 ICMP Flood Simulate ping flood
6 Mixed Attack Combination of multiple attacks

Configuration Parameters:

  • Threads: Number of parallel connections (1–100)
  • Duration: Simulation duration (seconds)
  • Packet Size: Packet size (bytes)
  • Target URL/IP

Monitoring:

  • Real-time statistics
  • Requests per second
  • Bandwidth usage
  • Error rate

⚠️ Warning: This simulation is for educational purposes only. Do not use it to attack systems without explicit permission.

9. Forensic Toolkit

Digital forensics and incident response tools.

Analysis Features:

No Tool Description
1 File Analysis Metadata, hashes, file structure
2 Memory Analysis System memory and processes
3 Network Forensics Traffic capture and analysis
4 Registry Analysis Windows registry analysis
5 Malware Detector Malware signature scanning
6 Data Carver Deleted file recovery
7 Timeline Analysis Forensic timeline creation
8 Disk Imaging Create disk images
9 Log Analyzer System log analysis
10 Browser Forensics Browser history extraction
11 USB History USB device history
12 Process Analysis Running process analysis

Output Formats:

  • JSON — Structured data for further processing
  • HTML — Human-readable report
  • TXT — Plain text summary

Usage:

# Select menu 9 (Forensic Tool)
# Select submenu 1 (File Analysis)
# Enter file path: /path/to/suspicious.exe
# Analysis will display:
#   - Hash (MD5, SHA1, SHA256)
#   - Metadata
#   - File type
#   - Creation/modification dates

10. System Optimizer

System optimization and recovery tools.

Optimization Features:

No Feature Description
1 Clear Cache Remove temporary and cache files
2 Memory Optimization Free up RAM and optimize memory
3 Process Management Kill unnecessary processes
4 Startup Manager Manage startup applications
5 Disk Cleanup Clean up disk space
6 Network Optimization Optimize network settings
7 System Recovery Recover from errors/freezes
8 Self-Diagnostics Check tool health
9 Refresh Tool Restart Z-TOOL with fresh state
10 System Monitor Real-time system monitoring

System Monitor Display:

  • CPU usage per core
  • Memory usage (RAM + Swap)
  • Disk usage per partition
  • Network I/O statistics
  • Top 5 processes by CPU/memory

📋 Requirements

Minimum Requirements:

Component Specification
OS Linux (Ubuntu 18.04+), Windows 10+, macOS 11+, Android (Termux)
Python 3.8 or higher
RAM 512 MB (minimum), 2 GB (recommended)
Storage 500 MB (minimum), 2 GB (recommended)
Network Internet connection required for some features

Dependencies:

Package Version Purpose
Python 3.8+ Runtime
pip latest Package manager
git latest Version control
aircrack-ng 1.7+ WiFi tools (optional)
hostapd 2.9+ Evil twin (optional)
dnsmasq 2.85+ DHCP server (optional)
tcpdump 4.99+ Packet capture (optional)

🚀 Installation

Linux / macOS

# Clone repository
git clone https://github.com/zeennxx/z-tool.git
cd z-tool

# Grant permission and run installer
chmod +x setup.sh
./setup.sh

# Select installation type (1-6)
# 1 = Full Installation (all features)
# 2 = Minimal Installation
# 3 = Web Panel Only
# 4 = Forensic Tools Only
# 5 = Network Tools Only
# 6 = Development Installation

# After installation, run
source venv/bin/activate
python ztool.py

# Or use the runner script
./run.sh

Windows

git clone https://github.com/zeennxx/z-tool.git
cd z-tool
setup.bat
run.bat

Termux (Android)

pkg update && pkg upgrade
pkg install python git python-pip
git clone https://github.com/zeennxx/z-tool.git
cd z-tool
pip install -r requirements.txt
python ztool.py

Install Specific Dependencies

pip install -r requirements.txt

# Optional dependencies
pip install scapy                      # WiFi tools
pip install flask                      # Web panel
pip install paramiko                   # SSH attacks
pip install mysql-connector-python     # MySQL attacks

📁 Project Structure

Z-TOOL/
│
├── ztool.py                          # Main entry point
├── run.sh / run.bat                  # Runner scripts
├── README.md                         # Documentation
├── requirements.txt                  # Full dependencies
├── requirements-minimal.txt          # Minimal dependencies
├── setup.sh / setup.bat              # Installation scripts
│
├── core/
│   ├── banner.py
│   ├── menu.py
│   ├── license.py
│   ├── config.py
│   ├── logger.py
│   └── utils.py
│
├── modules/
│   ├── phishx/
│   ├── password_attack/
│   ├── wifi_attack/
│   ├── social_engineering/
│   ├── vulnerability_analysis/
│   ├── web_panel/
│   ├── telegram_discord/
│   ├── ddos_simulation/
│   ├── forensic_tool/
│   └── optimizer/
│
│
└── tests/
    ├── test_modules.py
    └── test_utils.py

📜 License

This project is licensed under the GNU General Public License v3.0 + Security Tool Use Addendum.

╔══════════════════════════════════════════════════════════════╗
║                    Z-TOOL LICENSE                            ║
╠══════════════════════════════════════════════════════════════╣
║  License : GPL v3.0 + Security Tool Use Addendum             ║
║  Author  : zeen                                              ║
║  GitHub  : https://github.com/zeennxx                        ║
║  Version : 2.0.0                                             ║
╠══════════════════════════════════════════════════════════════╣
║  KEY TERMS:                                                  ║
║  1. Educational and authorized security testing only         ║
║  2. Written permission required before testing any system    ║
║  3. Modifications must remain open source under GPL v3       ║
║  4. Commercial use requires written permission               ║
║  5. Author assumes no liability for misuse                   ║
╠══════════════════════════════════════════════════════════════╣
║  Full license: See LICENSE file in this repository           ║
║  GPL v3 text : https://www.gnu.org/licenses/gpl-3.0.txt      ║
║  © 2026-2030 zeen. All rights reserved.                      ║
╚══════════════════════════════════════════════════════════════╝

⚠️ Disclaimer

╔══════════════════════════════════════════════════════════════╗
║                      LEGAL DISCLAIMER                        ║
╠══════════════════════════════════════════════════════════════╣
║  Z-TOOL is developed for EDUCATIONAL and AUTHORIZED          ║
║  SECURITY TESTING purposes ONLY.                             ║
╠══════════════════════════════════════════════════════════════╣
║  By using this tool, you agree to:                           ║
║  ✓ Use only on systems you own or have explicit permission   ║
║  ✓ Comply with all applicable laws and regulations           ║
║  ✓ Accept full responsibility for your actions               ║
║  ✓ Not use for malicious or illegal activities               ║
╠══════════════════════════════════════════════════════════════╣
║  The author (zeen) is NOT responsible for:                   ║
║  ✗ Any damage caused by misuse of this tool                  ║
║  ✗ Legal consequences of unauthorized access                 ║
║  ✗ Any data loss or system damage                            ║
╠══════════════════════════════════════════════════════════════╣
║  Unauthorized access is ILLEGAL. USE AT YOUR OWN RISK!       ║
╚══════════════════════════════════════════════════════════════╝

📞 Contact & Support

Platform Link
👤 GitHub @zeennxx
📘 Facebook Zennnxx
🐛 Issues Report a Bug
💬 Discussions Community Forum

Contributing:

  1. Fork the repository
  2. Create a feature branch (git checkout -b feature/amazing-feature)
  3. Commit your changes (git commit -m 'Add amazing feature')
  4. Push to the branch (git push origin feature/amazing-feature)
  5. Open a Pull Request

When reporting issues, please include:

  • Z-TOOL version
  • Operating system and version
  • Python version
  • Full error traceback
  • Steps to reproduce

⭐ Support This Project

If Z-TOOL helped you, show your support — it only takes a second!


Star Repo Follow


🌟 Star this repo — help Z-TOOL grow in the security community!

👤 Follow @zeennxx — stay updated on new tools and releases!


Star History Chart

Built with 🔥 for the security community

>>================================================<<
||.%%%%%%..........%%%%%%...%%%%....%%%%...%%.....||
||....%%.............%%....%%..%%..%%..%%..%%.....||
||...%%....%%%%%%....%%....%%..%%..%%..%%..%%.....||
||..%%...............%%....%%..%%..%%..%%..%%.....||
||.%%%%%%............%%.....%%%%....%%%%...%%%%%%.||
||................................................||
>>================================================<<
              Happy Hacking! — zeen

© 2026-2030 zeen — All rights reserved

About

Z-TOOL is an all-in-one security framework designed for ethical hacking, penetration testing, and security research. Built with Python, this tool combines 10+ security modules into a single integrated platform with a premium CLI interface.

Topics

ddos-simulationhacking-frameworkhacking-toolhacktoolinformation-gatheringkalimacosnetwork-securityosintpentestingtermuxweb-securitywindowszeennxx

Resources

Readme
License
Activity

Stars

7 stars

Watchers

1 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors

Languages