🌐 ProxNet

ProxNet is an AI-powered local network threat visualizer and monitoring dashboard. It scans your local network, identifies devices, detects potential threats or suspicious activities, and displays them on a dark-themed, real-time interactive web dashboard.

🚀 Features

• ARP Network Scanning: Discovers all active devices on your local network.
• Device Identification: Resolves MAC addresses to common vendors (e.g., Apple, Intel) and fingerprints OS via TTL.
• Threat Detection: Alerts on new devices, suspicious open ports (e.g., SMB 445), and potential ARP spoofing.
• Real-time Web Dashboard: Interactive D3.js network topology graph with live WebSocket updates.

🏗️ Architecture

flowchart TD
    A[Scanner Module] -->|ARP/Port Scan| B(Network Devices)
    A -->|Raw Device Data| C[Detector Module]
    C -->|Rule-based Analysis| D{Threat Engine}
    D -->|Threats & Devices| E[Flask + WebSocket Server]
    E -->|Real-time Events| F[Web Dashboard D3.js]
    F -->|Manual Scan Request| E

🛠️ Installation

1. Clone or download this project.
2. Ensure you have Python installed.
3. Install the required dependencies:

   pip install -r requirements.txt
   

💻 Usage

IMPORTANT: Network scanning (via scapy) requires administrative privileges. You must run the application as Administrator (Windows) or root (Linux/Mac).

Run the main application:

python proxnet.py --interface Ethernet

Then, open your web browser and navigate to http://localhost:5000.

📸 Screenshots

(comming soon !)

🧠 What You'll Learn (Networking Concepts)

• ARP (Address Resolution Protocol): How IP addresses map to physical MAC addresses.
• Port Scanning: How checking open doors (ports) on a device reveals running services.
• OS Fingerprinting: How packet details (like TTL - Time To Live) hint at the underlying operating system.
• Threat Analysis: Why duplicate IPs with different MACs or certain open ports might indicate a cyber threat.

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.