📌 Overview

The Ultimate Digital Forensics & Network Security Tool is a powerful Python-based forensic application built using PyQt5. It combines packet capture, Nmap scanning, file hashing, hidden file detection, VirusTotal integration, and advanced network analysis with visualizations.

🚀 Features

🛡️ Network & Security Tools

• 📡 Packet Capture: Capture live network traffic and analyze packets.
• 🕵️ Advanced Nmap Scanning:
  • Quick Scan
  • Advanced Scan (OS detection, services, vulnerabilities)
  • Custom Scan (User-defined options)
  • 📊 Visual Analysis:
    • Open Ports Analysis
    • IP Distribution Graphs
    • Network Topology Mapping
  • 📋 Tabular Results: Structured scan results in a readable format.

📂 File Forensics

• 🔑 File Hashing: Compute and verify file integrity using SHA-256.
• 🔎 Hidden File Search: Identify hidden and suspicious files.
• 🦠 VirusTotal Integration: Check file hashes against the VirusTotal database.

📊 Graphs & Visualizations

• Open Port Distribution
• IP Address Activity
• Packet Capture Summary
• Nmap Scan Statistics

---

🏗️ Installation

🔧 Requirements

Ensure you have Python 3.8+ installed.

📥 Install Dependencies

pip install PyQt5 matplotlib requests scapy python-nmap

🐧 Linux Users

For full functionality, install Nmap:

sudo apt install nmap

For packet capture, install Wireshark/TShark:

sudo apt install wireshark tshark

🏃‍♂️ Usage

🔹 Running the Tool

Run the Python script:

python main.py

🌐 Running Nmap Scans

• Click Quick Scan for a fast port scan.
• Click Advanced Scan for OS and service detection.
• Click Custom Scan, enter your Nmap options (e.g., -sS -p 80,443 192.168.1.1), and execute.

📡 Packet Capture

• Click Start Capture to begin monitoring traffic.
• Click Stop Capture to save packets.
• View packet details in the GUI.

📂 File Forensics

• Select a file for SHA-256 hashing.
• Run a hidden file search.
• Scan a file’s hash with VirusTotal.

📊 Viewing Graphs

• Click Show Open Ports Graph to analyze port distribution.
• Click Visualize IP Distribution for network insights.

🔥 Screenshots

📊 Network Scan Graph

📌 Main Interface

🛠️ Advanced Customization

🛡️ Security & Privacy Considerations

• Packet capturing requires administrative privileges.
• Nmap scans may trigger firewall alerts.
• VirusTotal API should be used responsibly (consider rate limits).

🏗️ Future Enhancements

• 📌 Real-time Threat Detection
• 📌 Database Integration for Scan Logs
• 📌 Automated Malware Analysis

📜 License

MIT License. Free to use but do not distribute or sell without permission.

Developed by Muhammad Essam 🛡️ | CapitalAbuEssam