🛡️ Network Toolkit - Mini Security Testing Suite

A comprehensive Java-based network security toolkit combining features from industry-standard tools: nmap, Zabbix, Wireshark, and Nikto.

⚡ Features

🔍 Port Scanner (nmap-like)

TCP/UDP port scanning
Service detection and banner grabbing
OS fingerprinting
CIDR notation support
Multi-threaded scanning (100 concurrent threads)

📊 Network Monitor (Zabbix-like)

Real-time host availability monitoring
Performance metrics tracking
Configurable alert thresholds
Historical data with charts
SNMP support

📦 Packet Analyzer (Wireshark-like)

Live packet capture (requires Npcap/WinPcap)
Protocol dissection (TCP, UDP, ICMP, HTTP, DNS, etc.)
BPF filter support
Hex dump viewer
Packet statistics

🧭 MIB Browser (SNMP-like)

SNMP v2c GET operations
SNMP WALK from root OID
Configurable community, host, port, and timeout
Basic MIB value browsing for network devices

🌐 Web Vulnerability Scanner (Nikto-like)

HTTP/HTTPS security testing
SSL/TLS certificate analysis
SQL injection detection
Directory enumeration
Header analysis
XSS detection

📁 Additional Features

Scan History: View, filter, and export past results
Database: H2 embedded database for persistent storage
Export: Results to CSV, JSON, HTML formats
Configuration: Customizable settings for all modules
Logging: Comprehensive logging with rotation

🚀 Quick Start

Prerequisites

Java 21 (JDK) installed
Eclipse IDE (recommended) or Maven
Npcap (for packet capture on Windows)

Running in Eclipse

Open Eclipse and import the project

Update Maven dependencies:

Right-click project → Maven → Update Project → Force Update

Run the application:

Right-click MainApplication.java → Run As → Java Application

Accept the legal disclaimer
Start using the toolkit

📖 See QUICKSTART.md for detailed instructions.

Running from Command Line

# Using Maven
mvn javafx:run

# Or use the batch script (Windows)
run.bat

📁 Project Structure

Network_Toolkit/
├── src/
│   ├── com/networktoolkit/
│   │   ├── main/              # Application entry point
│   │   ├── model/             # Data models
│   │   │   ├── common/        # Shared models (Host, Port, Severity, etc.)
│   │   │   ├── portscan/      # Port scan results
│   │   │   ├── monitor/       # Monitoring metrics
│   │   │   ├── packet/        # Packet data
│   │   │   └── webscan/       # Vulnerability findings
│   │   ├── service/           # Business logic
│   │   │   ├── common/        # Infrastructure (DB, Config, etc.)
│   │   │   ├── portscan/      # Port scanning engine
│   │   │   ├── monitor/       # Monitoring service
│   │   │   ├── packet/        # Packet capture
│   │   │   └── webscan/       # Web security scanner
│   │   ├── controller/        # JavaFX controllers
│   │   ├── view/              # FXML layouts and CSS
│   │   ├── util/              # Utility classes
│   │   ├── dao/               # Database access
│   │   └── exception/         # Custom exceptions
│   ├── module-info.java       # Java module configuration
│   └── logback.xml            # Logging configuration
├── pom.xml                    # Maven dependencies
├── QUICKSTART.md              # Quick start guide
├── RUNNING.md                 # Detailed running/debugging guide
└── README.md                  # This file

🛠️ Technology Stack

Core

Java 21 - Modern Java with records, pattern matching, and virtual threads
JavaFX 21 - Modern UI framework
Maven - Dependency management and build tool

Libraries

Pcap4J - Packet capture and analysis
SNMP4J - SNMP monitoring
OkHttp - HTTP client for web scanning
Jsoup - HTML parsing
H2 Database - Embedded SQL database
Jackson - JSON processing
SLF4J + Logback - Logging framework
JFreeChart - Charts and graphs
Apache Commons Net - Network protocols
Netty - Advanced protocol handling

📊 Implementation Phases

Phase	Module	Status
✅ 1	Foundation	COMPLETE
✅ 2	Port Scanner	BASIC COMPLETE
✅ 3	Network Monitor	BASIC COMPLETE
✅ 4	Packet Analyzer	BASIC COMPLETE
✅ 5	Web Scanner	BASIC COMPLETE
⏳ 6	Integration & Polish	Pending
⏳ 7	Testing & Documentation	Pending

Phase 1: Foundation ✅

Maven project setup with all dependencies
Java module system configuration
Infrastructure services:
- DatabaseService (H2 with 5 tables)
- ConfigurationService (JSON-based)
- ThreadPoolManager (4 specialized pools)
Utility classes:
- NetworkUtils (IP validation, CIDR parsing, port range parsing)
- ValidationUtils (Input sanitization, injection prevention)
Base models: Host, Port, ScanResult, Severity
JavaFX application skeleton with 5 tabs
Logging configuration
Legal disclaimer

⚖️ Legal & Ethical Use

⚠️ IMPORTANT: For Authorized Security Testing Only

This tool is designed for:

✅ Testing systems you own
✅ Authorized penetration testing with written permission
✅ Educational purposes in controlled environments
✅ Security research on designated test systems

UNAUTHORIZED use of this tool may be ILLEGAL and could result in:

Criminal prosecution
Civil liability
Network/service disruption
Violation of computer fraud laws

Recommended Test Targets

localhost / 127.0.0.1 - Your own machine
scanme.nmap.org - Official nmap test server (port scanning only)
DVWA (Damn Vulnerable Web Application) - Web security testing
Your own virtual machines or lab environments

🔒 Security Features

Input Validation: All user inputs are sanitized to prevent injection attacks
SQL Injection Prevention: PreparedStatements used throughout
Path Traversal Protection: File paths validated
Command Injection Prevention: Shell command inputs sanitized
Rate Limiting: Prevents accidental denial-of-service
Audit Logging: All scan activities logged for accountability

🗄️ Database Schema

The application uses H2 embedded database with the following tables:

hosts - Network hosts (IP, hostname, first/last seen)
scan_results - Master table for all scan types
port_scan_details - Specific port scan findings
alerts - Monitoring alerts
configuration - Application settings

Location: ~/.networktoolkit/data.mv.db

📝 Configuration

Configuration is stored in JSON format at: ~/.networktoolkit/config.json

Default Settings

{
  "portScan": {
    "defaultPortRange": "1-1024",
    "timeoutMs": 2000,
    "maxThreads": 100,
    "enableServiceDetection": true
  },
  "monitoring": {
    "defaultCheckIntervalSeconds": 60,
    "alertThresholds": {
      "responseTimeMs": 1000,
      "consecutiveFailures": 3
    }
  },
  "packetCapture": {
    "maxPacketsInMemory": 10000,
    "promiscuousMode": true
  },
  "webScan": {
    "userAgent": "NetworkToolkit/1.0",
    "timeoutSeconds": 30
  },
  "database": {
    "retentionDays": 30
  },
  "ui": {
    "theme": "dark",
    "fontSize": 14
  }
}

📖 Documentation

QUICKSTART.md - Get started in 5 minutes
RUNNING.md - Comprehensive running and debugging guide
Implementation Plan - See .claude/plans/wild-finding-kitten.md

🧪 Testing

Recommended Test Workflow

Port Scanning:

Target: localhost (127.0.0.1)
Ports: 1-1024
Expected: Find open ports (80, 443, etc. if running web server)

Network Monitoring:

Targets: localhost, google.com
Interval: 30 seconds
Expected: Track availability and response times

Packet Capture:

Interface: Primary network adapter
Filter: tcp port 80
Expected: Capture HTTP traffic while browsing

Web Scanning:

Target: http://localhost (DVWA installed)
Expected: Detect SQL injection vulnerabilities

🐛 Debugging

Enable Debug Logging

Edit src/logback.xml:

<root level="DEBUG">  <!-- Change from INFO -->
    <appender-ref ref="CONSOLE" />
    <appender-ref ref="FILE" />
</root>

Log Locations

Application Log: ~/.networktoolkit/logs/application.log
Scan Log: ~/.networktoolkit/logs/scans.log

View Logs in Real-time

# PowerShell
Get-Content "$env:USERPROFILE\.networktoolkit\logs\application.log" -Tail 50 -Wait

# Bash
tail -f ~/.networktoolkit/logs/application.log

🤝 Contributing

This is an educational project. Future enhancements could include:

SYN scan support (requires raw sockets)
Advanced OS fingerprinting
More web vulnerability tests (XSS, CSRF, etc.)
SSL/TLS cipher suite analysis
Report generation (PDF export)
Dark/light theme toggle
Multi-language support

📜 License

Educational use only. This tool is provided "as is" without warranty of any kind.

🙏 Acknowledgments

Inspired by and combines concepts from:

nmap - Network exploration and security auditing
Zabbix - Enterprise-class monitoring
Wireshark - Network protocol analyzer
Nikto - Web server scanner

Built with:

OpenJFX, Pcap4J, H2 Database, Jackson, SLF4J, and many other open-source libraries

📞 Support

Check logs in ~/.networktoolkit/logs/
Review RUNNING.md for troubleshooting
Verify all prerequisites are installed

Current Version: 1.0.0 Status: Phase 1 Complete - Ready for Phase 2 Last Updated: March 21, 2026

Name		Name	Last commit message	Last commit date
.settings		.settings
.tools		.tools
.vscode		.vscode
bin		bin
src		src
target		target
.classpath		.classpath
.project		.project
Network Toolkit.launch		Network Toolkit.launch
README.md		README.md
pom.xml		pom.xml
run.bat		run.bat

Latest commit

History

Folders and files

Repository files navigation