GHOSTLINK // Enterprise Cyber Command Center & Defensive Scanner

GHOSTLINK is a lightweight, high-performance network security scanner and interactive cyber command center. It provides network asset discovery, port risk analysis, CVE advisory leads, Exploit-DB public metadata correlation, automated hardening script generation (PowerShell & Bash), and executive-grade PDF security reports.

Designed for home networks, IT administrators, and security analysts—available both as a standalone CLI terminal tool and a Web GUI Command Center.

---

🚀 Key Features

• 📡 Subnet & CIDR Asset Discovery: Fast multi-threaded ping sweeps and TCP port probing (supports IP addresses like 192.168.1.1 or CIDRs like 192.168.1.0/24).
• 🔍 Service Banner & Fingerprinting: Identifies common listening services (SSH, FTP, HTTP, SMB, RDP, VNC, Redis, MySQL, MSSQL) and flags high-risk network ports.
• 🛡️ CVE Advisory & Exploit-DB Index Correlation: Maps reachable services against public CVE advisory leads and cross-references public Exploit-DB metadata without downloading PoC files.
• 📜 Automated Hardening Script Generator: Generates copy-paste ready PowerShell and Bash scripts tailored to block exposed ports and secure host services.
• 📊 Executive PDF Report Exporter: Generates dark-themed, publication-ready PDF security reports with risk scoring and audit trails.
• 🖥️ Dual Modes (CLI & Web GUI):
  • CLI Mode: Terminal interface using standard output or enhanced Rich terminal formatting.
  • Web GUI Mode: Tactical cyberpunk-styled desktop interface with interactive canvas network topology, real-time radar telemetry, and terminal logging streams.
• 🔐 100% Offline & Private: Zero external API keys or cloud dependencies required. Runs purely on your local machine.

---

🛠️ Project Structure

ghostlink/
├── ghostlink_lite.py       # Core scanner engine & CLI interface
├── ghostlink_gui/          # Tactical Web GUI application
│   ├── app.py              # Flask server backend & local API
│   ├── pdf_report.py       # ReportLab PDF report generation engine
│   ├── templates/          # Web Command Center HTML templates
│   ├── static/             # Cyberpunk styling & JS topology canvas
│   └── requirements.txt    # GUI dependencies
├── requirements.txt        # Top-level Python requirements
├── .env.example            # Environment variables template
├── .gitignore              # Git ignore rules
├── run.bat                 # Windows interactive launcher
├── run_cli.bat / .sh       # CLI mode launchers (Windows & Linux/macOS)
├── run_gui.bat / .sh       # GUI mode launchers (Windows & Linux/macOS)
├── LICENSE                 # MIT License
├── SECURITY.md             # Security policy & disclaimer
└── README.md               # Documentation

---

⚡ Quick Start

1. Clone the Repository

git clone https://github.com/rudhrachevli/Ghostlink_lite.git
cd Ghostlink_lite

2. Install Dependencies

pip install -r requirements.txt

---

🖥️ Usage

Option A: Launch Interactive Menu (Windows)

Double-click run.bat or run:

run.bat

---

Option B: Web GUI Command Center

Launch the Web GUI server and open your desktop browser interface:

Windows:

run_gui.bat

Linux / macOS:

chmod +x run_gui.sh
./run_gui.sh

Or directly with Python:

python ghostlink_gui/app.py

The GUI automatically opens on http://127.0.0.1:5002.

---

Option C: Terminal CLI Mode

Interactive Terminal Menu:

python ghostlink_lite.py

Quick Command Line Scan:

# Scan a network CIDR subnet
python ghostlink_lite.py scan 192.168.1.0/24

# Deep scan a specific host IP
python ghostlink_lite.py check 192.168.1.1

# Save scan output to JSON
python ghostlink_lite.py scan 192.168.1.0/24 -o network_report.json

---

🛡️ Security Hardening & Remediation

When a host exposes risky ports (e.g. SMB port 445, Telnet port 23, RDP port 3389, VNC port 5900), GHOSTLINK automatically generates custom defensive hardening commands for:

• Windows PowerShell: Disables legacy protocols (SMBv1), restricts inbound firewall rules, and enforces Remote Desktop Network Level Authentication (NLA).
• Linux Bash: Configures ufw firewall rules and stops insecure systemd sockets (e.g., Telnet, VNC).

---

📄 PDF Security Report

Export comprehensive, executive-grade PDF assessment reports directly from the Web GUI. Reports include:

• Overall Network Security Score (0-100)
• Host inventory & OS fingerprinting table
• Per-host risk severity breakdown (Critical, High, Medium, Low)
• Safe verification steps and protection guidance
• CVE & Exploit-DB correlation tables

---

⚠️ Legal & Ethical Disclaimer

GHOSTLINK is created exclusively for legal, defensive security assessment.

Always ensure you have explicit, written authorization before scanning any network, subnet, or host system. Scanning targets without permission may violate computer security laws and regulations. The developers assume no liability for misuse or damage caused by this software.

---

📝 License

This project is licensed under the MIT License.