---

🧠 What is GhostKit?

GhostKit is a lightweight, portable cybersecurity toolbelt that lives entirely on a USB flash drive. Think Kali Linux, but slimmer, smarter, and supercharged with an offline AI Security Assistant — no internet, no installation, no trace.

Plug it in. Launch the menu. Audit, scan, and diagnose — then unplug and disappear like a ghost.

---

⚡ Feature Highlights

Nmap Scanner AI-powered port & service analysis with instant vulnerability summaries

Nuclei Scanner Template-driven web vulnerability scanning — fully offline

Local LLM Brain Ollama / LM Studio / Llamafile — explain logs, draft scripts, advise fixes

Wireshark Launch the industry standard network protocol analyzer instantly

---

🔄 Workflow

┌─────────────────────────────────────────────────────────────────────────┐
│                                                                         │
│   ██████╗ ██╗  ██╗ ██████╗ ███████╗████████╗██╗  ██╗██╗████████╗      │
│  ██╔════╝ ██║  ██║██╔═══██╗██╔════╝╚══██╔══╝██║ ██╔╝██║╚══██╔══╝      │
│  ██║  ███╗███████║██║   ██║███████╗   ██║   █████╔╝ ██║   ██║         │
│  ██║   ██║██╔══██║██║   ██║╚════██║   ██║   ██╔═██╗ ██║   ██║         │
│  ╚██████╔╝██║  ██║╚██████╔╝███████║   ██║   ██║  ██╗██║   ██║         │
│   ╚═════╝ ╚═╝  ╚═╝ ╚═════╝ ╚══════╝   ╚═╝   ╚═╝  ╚═╝╚═╝   ╚═╝        │
│                                                                         │
└─────────────────────────────────────────────────────────────────────────┘

  🔌 PLUG IN USB
       │
       ▼
  ┌────────────────────────────────────┐
  │         GhostKit.bat               │   ← Double-click to launch
  │         Main Menu                  │
  └────────────┬───────────────────────┘
               │
     ┌─────────┴──────────────────────────────────────┐
     │                                                 │
     ▼                                                 ▼
  ┌──────────────────┐                     ┌──────────────────────┐
  │  Network Audit   │                     │  Web Audit (Nuclei)  │
  │  (Nmap)          │                     │  Target URL          │
  └────────┬─────────┘                     └──────────┬───────────┘
           │                                          │
           ▼                                          ▼
     [ Scan Output ]                           [ CVE Findings ]
           │                                          │
           └──────────────┬───────────────────────────┘
                          │
                          ▼
               ┌──────────────────────┐
               │  🤖 AI ASSISTANT     │
               │  (Local LLM Engine)  │
               │  Ollama / Llamafile  │
               │  LM Studio           │
               └──────────────────────┘
                          │
                          ▼
             ┌─────────────────────────┐
             │  📋 Human-Readable      │
             │  Security Report        │
             │  + Remediation Steps    │
             └─────────────────────────┘

---

🗂️ Project Structure

GhostKit/
│
├── 🚀 GhostKit.bat              ← Main launcher (double-click this!)
├── ⚙️  setup.ps1                ← One-click environment bootstrapper
├── 📖 README.md
│
├── 📂 scripts/
│   ├── 🤖 ai_assistant.py      ← Offline LLM engine & log analyzer
│   ├── 🌐 network_audit.py     ← Nmap scanner + AI analysis
│   └── 🔎 web_audit.py         ← Nuclei web scanner + AI analysis
│
├── 📂 models/                  ← Drop your .gguf / llamafile here
│   └── .gitkeep
│
└── 📂 tools/                   ← Drop your portable binaries here
    ├── python/                 ← Auto-downloaded by setup.ps1
    ├── nmap/                   ← Extract nmap.exe here
    ├── nuclei/                 ← Extract nuclei.exe here
    └── wireshark/              ← Extract Wireshark Portable here

---

🛠️ Setup Guide

Prerequisites: A USB drive (8GB+ recommended), a machine with internet access for the one-time setup.

Step 1 — Run the Bootstrapper

GhostKit.bat  →  Option 1: Setup Environment

This will automatically:

• ✅ Create the tools/, scripts/, models/ directory structure
• ✅ Download Portable Python 3.11 (embeddable, no install required)
• ✅ Install pip and required packages in the isolated environment

Step 2 — Add the Security Tools

Tool	Where to Download	Place at
Nmap	nmap.org/download	tools/nmap/nmap.exe
Nuclei	GitHub Releases	tools/nuclei/nuclei.exe
Wireshark	PortableApps.com	tools/wireshark/Wireshark.exe

Step 3 — Configure Your AI Brain

Pick one of the following local LLM engines and place your model in models/:

┌─────────────────────────────────────────────────────────────┐
│  ENGINE              PORT     HOW TO USE                    │
├─────────────────────────────────────────────────────────────┤
│  🦙 Llamafile        :8080    Run the .llamafile executable  │
│  🖥️  LM Studio       :8080    Load a .gguf → Start Server   │
│  🐑 Ollama           :11434   ollama serve                  │
└─────────────────────────────────────────────────────────────┘

💡 Recommended for USB: Meta-Llama-3-8B-Instruct.Q4_K_M.llamafile — self-contained, single-file, runs on any machine.

---

🚀 Usage

Launch GhostKit.bat and pick from the menu:

=======================================================
         GhostKit: Portable Security Suite
=======================================================

 1. Setup Environment
 2. Run AI-Assisted Network Audit   (Nmap)
 3. Run AI-Assisted Web Audit       (Nuclei)
 4. Launch Wireshark
 5. Interactive AI Security Assistant
 6. Exit

🔍 AI-Assisted Network Audit

Enter target: 192.168.1.1

[+] Running Nmap scan...
[+] Sending results to AI Assistant...

--- AI Analysis ---
Port 22 (SSH) is open and running OpenSSH 8.2.
⚠️  Older version detected — CVE-2023-XXXXX applies.
✅  Recommendation: Upgrade to OpenSSH 9.x and disable password auth.
---

🌐 AI-Assisted Web Audit

Enter target: https://example.com

[+] Running Nuclei scan... (offline mode)
[+] Sending findings to AI Assistant...

--- AI Analysis ---
Found: exposed .env file at /api/.env
🚨  HIGH SEVERITY — API keys may be leaked.
✅  Recommendation: Block access to .env via server config.
---

---

⚠️ Legal & Ethics Disclaimer

GhostKit is designed exclusively for:

• ✅ Penetration testing on your own networks and systems
• ✅ Authorized security assessments with written permission
• ✅ Educational use and learning cybersecurity concepts

❌ Do NOT use GhostKit against systems you do not own or have explicit permission to test. Unauthorized use may violate the Computer Fraud and Abuse Act (CFAA) and similar laws.

---

🤝 Contributing

Contributions are welcome! Feel free to open an issue or submit a pull request.

git clone https://github.com/geevarghesekthomas84-sys/GhostKit.git

---

Made with ❤️ for the security community