astrotools-cli 1.0.0__py3-none-any.whl

astrotools/cli.py

@@ -0,0 +1,1345 @@
+#!/usr/bin/env python3
+"""
+===============================================================================
+SUPER TOOLKIT - ULTIMATE EDITION
+Comprehensive Network Reconnaissance, Security & Cryptography
+===============================================================================
+"""
+import hashlib
+import ipaddress
+import json
+import os
+import random
+import re
+import socket
+import string
+import struct
+import sys
+import time
+import ssl
+import subprocess
+from urllib.parse import urlparse
+from concurrent.futures import ThreadPoolExecutor, as_completed
+import requests
+import questionary
+from rich.console import Console
+from rich.panel import Panel
+from rich.table import Table
+from rich.progress import track, Progress, SpinnerColumn, TextColumn
+
+# Initialize Rich Console
+console = Console()
+
+# Enable ANSI colors on Windows legacy terminals if needed
+if os.name == 'nt':
+    os.system('')
+
+# Custom Questionary Style
+MENU_STYLE = questionary.Style([
+    ('qmark', 'fg:cyan bold'),
+    ('question', 'fg:cyan bold'),
+    ('answer', 'fg:green bold'),
+    ('pointer', 'fg:cyan bold'),
+    ('highlighted', 'fg:black bg:cyan bold'),
+    ('selected', 'fg:green bold'),
+    ('separator', 'fg:gray'),
+    ('instruction', 'fg:gray italic'),
+])
+
+def clear_screen():
+    """Clears terminal screen cross-platform."""
+    os.system('cls' if os.name == 'nt' else 'clear')
+
+def show_banner():
+    """Displays the stylized AstroTools banner."""
+
+    clear_screen()
+
+    banner_art = r"""
+ █████╗ ███████╗████████╗██████╗  ██████╗     ████████╗ ██████╗  ██████╗ ██╗      ███████╗
+██╔══██╗██╔════╝╚══██╔══╝██╔══██╗██╔═══██╗    ╚══██╔══╝██╔═══██╗██╔═══██╗██║      ██╔════╝
+███████║███████╗   ██║   ██████╔╝██║   ██║       ██║   ██║   ██║██║   ██║██║      ███████╗
+██╔══██║╚════██║   ██║   ██╔══██╗██║   ██║       ██║   ██║   ██║██║   ██║██║      ╚════██║ 
+██║  ██║███████║   ██║   ██║  ██║╚██████╔╝       ██║   ╚██████╔╝╚██████╔╝███████╗ ███████║ 
+╚═╝  ╚═╝╚══════╝  ╚═╝   ╚═╝  ╚═╝ ╚═════╝         ╚═╝    ╚═════╝  ╚═════╝ ╚══════╝ ╚══════╝             
+
+
+"""
+
+    console.print(banner_art, style="bold cyan")
+    console.print(Panel(
+        "[bold green]⚡ AstroTools Beta (Proffessional Networking tools)[/bold green]\n"
+        "[italic gray]By CINEFy. Future updates comming soon...[/italic gray]",
+        border_style="cyan"
+    ))
+    print()
+
+def pause():
+    """Prompts user to press Enter before returning to menu."""
+    console.print("\n[dim]Press [bold]Enter[/bold] to return to main menu...[/dim]")
+    try:
+        input()
+    except (KeyboardInterrupt, EOFError):
+        pass
+
+def clean_host(target):
+    """Normalizes a URL, hostname, or host:port string to just the hostname."""
+    target = target.strip()
+    if not target:
+        return ""
+    if "://" in target:
+        parsed = urlparse(target)
+        return parsed.hostname or ""
+    return target.split("/")[0].split(":")[0].strip()
+
+def ensure_url(target, default_scheme="https"):
+    """Returns a URL with a scheme for HTTP tools."""
+    target = target.strip()
+    if not target:
+        return ""
+    if target.startswith(("http://", "https://")):
+        return target
+    return f"{default_scheme}://{target}"
+
+def run_command(cmd, timeout=12):
+    """Runs a system command and returns combined stdout/stderr text."""
+    try:
+        result = subprocess.run(
+            cmd,
+            capture_output=True,
+            text=True,
+            encoding="utf-8",
+            errors="replace",
+            timeout=timeout,
+        )
+        output = (result.stdout or "") + (result.stderr or "")
+        return output.strip(), result.returncode
+    except FileNotFoundError:
+        return f"Command not found: {cmd[0]}", 127
+    except subprocess.TimeoutExpired:
+        return f"Command timed out after {timeout}s.", 124
+
+# =============================================================================
+# 1. CRYPTOGRAPHY & SECURITY TOOLS
+# =============================================================================
+def password_generator():
+    """Generates strong passwords and evaluates security strength."""
+    show_banner()
+    console.print(Panel("[bold yellow]🔑 Password Generator & Strength Evaluator[/bold yellow]", border_style="yellow"))
+    try:
+        raw_len = console.input("[bold cyan]Enter password length [default: 16]: [/bold cyan]").strip()
+        length = int(raw_len) if raw_len else 16
+        if length < 4:
+            console.print("[yellow][!] Minimum length is 4. Adjusted to 4.[/yellow]")
+            length = 4
+    except ValueError:
+        console.print("[yellow][!] Invalid number. Using default length of 16.[/yellow]")
+        length = 16
+
+    use_symbols = questionary.confirm("Include special symbols (!@#$%^&*...)?", default=True, style=MENU_STYLE).ask()
+    use_digits = questionary.confirm("Include numbers (0-9)?", default=True, style=MENU_STYLE).ask()
+    use_upper = questionary.confirm("Include uppercase letters (A-Z)?", default=True, style=MENU_STYLE).ask()
+
+    char_pool = string.ascii_lowercase
+    guaranteed = [random.choice(string.ascii_lowercase)]
+    if use_upper:
+        char_pool += string.ascii_uppercase
+        guaranteed.append(random.choice(string.ascii_uppercase))
+    if use_digits:
+        char_pool += string.digits
+        guaranteed.append(random.choice(string.digits))
+    if use_symbols:
+        symbols = "!@#$%^&*()_+-=[]{}|;:,.<>?"
+        char_pool += symbols
+        guaranteed.append(random.choice(symbols))
+
+    remaining = length - len(guaranteed)
+    password_list = guaranteed + [random.choice(char_pool) for _ in range(max(0, remaining))]
+    random.shuffle(password_list)
+    password = "".join(password_list)
+
+    # Score calculation
+    score = 0
+    if len(password) >= 16: score += 3
+    elif len(password) >= 12: score += 2
+    elif len(password) >= 8: score += 1
+    if any(c in string.ascii_lowercase for c in password): score += 1
+    if any(c in string.ascii_uppercase for c in password): score += 1
+    if any(c in string.digits for c in password): score += 1
+    if any(c in "!@#$%^&*()_+-=[]{}|;:,.<>?" for c in password): score += 1
+
+    if score >= 6: rating = "[bold green]Very Strong / Excellent[/bold green]"
+    elif score >= 4: rating = "[bold cyan]Strong / Good[/bold cyan]"
+    elif score >= 3: rating = "[bold yellow]Moderate[/bold yellow]"
+    else: rating = "[bold red]Weak[/bold red]"
+
+    table = Table(title="Generated Password Details", border_style="cyan")
+    table.add_column("Property", style="bold cyan")
+    table.add_column("Value", style="bold white")
+    table.add_row("Password", f"[bold green]{password}[/bold green]")
+    table.add_row("Length", str(len(password)))
+    table.add_row("Strength Rating", rating)
+    table.add_row("Entropy Estimate", f"~{len(password) * 6:.1f} bits")
+    console.print("\n", table)
+    pause()
+
+def hash_tool():
+    """Generates and verifies cryptographic hashes."""
+    show_banner()
+    console.print(Panel("[bold yellow]🔒 Hash Generator & Verifier[/bold yellow]", border_style="yellow"))
+    action = questionary.select(
+        "Select Hash Operation:",
+        choices=[
+            "1. Generate Hashes for String (MD5, SHA1, SHA256, SHA512, etc.)",
+            "2. Verify Hash Match",
+            "Back to Main Menu"
+        ],
+        style=MENU_STYLE
+    ).ask()
+
+    if not action or action == "Back to Main Menu":
+        return
+
+    if "1. Generate" in action:
+        text = console.input("\n[bold cyan]Enter text to hash: [/bold cyan]")
+        encoded = text.encode('utf-8', errors='replace')
+        table = Table(title=f"Hashes for '{text}'", border_style="cyan")
+        table.add_column("Algorithm", style="cyan bold", width=12)
+        table.add_column("Hash Hex Digest", style="green")
+        
+        algorithms = [
+            ("MD5", hashlib.md5(encoded).hexdigest()),
+            ("SHA-1", hashlib.sha1(encoded).hexdigest()),
+            ("SHA-224", hashlib.sha224(encoded).hexdigest()),
+            ("SHA-256", hashlib.sha256(encoded).hexdigest()),
+            ("SHA-384", hashlib.sha384(encoded).hexdigest()),
+            ("SHA-512", hashlib.sha512(encoded).hexdigest()),
+        ]
+        for algo, h_val in algorithms:
+            table.add_row(algo, h_val)
+        console.print("\n", table)
+
+    elif "2. Verify" in action:
+        text = console.input("\n[bold cyan]Enter plain text: [/bold cyan]")
+        target_hash = console.input("[bold cyan]Enter hash to verify against: [/bold cyan]").strip().lower()
+        encoded = text.encode('utf-8', errors='replace')
+        hash_map = {
+            "MD5": hashlib.md5(encoded).hexdigest(),
+            "SHA-1": hashlib.sha1(encoded).hexdigest(),
+            "SHA-224": hashlib.sha224(encoded).hexdigest(),
+            "SHA-256": hashlib.sha256(encoded).hexdigest(),
+            "SHA-384": hashlib.sha384(encoded).hexdigest(),
+            "SHA-512": hashlib.sha512(encoded).hexdigest(),
+        }
+        match_found = None
+        for algo, h_val in hash_map.items():
+            if h_val.lower() == target_hash:
+                match_found = algo
+                break
+        
+        if match_found:
+            console.print(Panel(
+                f"[bold green]✔ MATCH CONFIRMED![/bold green]\n"
+                f"The provided hash matches [bold cyan]{match_found}[/bold cyan] of the text.",
+                title="Result", border_style="green"
+            ))
+        else:
+            console.print(Panel(
+                f"[bold red]✘ MISMATCH![/bold red]\n"
+                f"The provided hash does NOT match any standard algorithm.",
+                title="Result", border_style="red"
+            ))
+    pause()
+
+# =============================================================================
+# 2. NETWORK INTELLIGENCE & RECON TOOLS
+# =============================================================================
+def my_network_info():
+    """Displays local network parameters and public IP with geo summary."""
+    show_banner()
+    console.print(Panel("[bold yellow]📡 My Network & Public IP Info[/bold yellow]", border_style="yellow"))
+    hostname = socket.gethostname()
+    try:
+        local_ip = socket.gethostbyname(hostname)
+    except Exception:
+        local_ip = "127.0.0.1"
+
+    table = Table(title="Host & Public Network Information", border_style="cyan")
+    table.add_column("Property", style="bold cyan")
+    table.add_column("Value", style="bold green")
+    table.add_row("Hostname", hostname)
+    table.add_row("Local IP", local_ip)
+
+    with Progress(SpinnerColumn(), TextColumn("[progress.description]{task.description}"), transient=True) as progress:
+        progress.add_task(description="Fetching public IP & geolocation data...", total=None)
+        try:
+            res = requests.get("http://ip-api.com/json/", timeout=6).json()
+            if res.get("status") == "success":
+                table.add_row("Public IP", res.get("query", "Unknown"))
+                table.add_row("Country", f"{res.get('country')} ({res.get('countryCode')})")
+                table.add_row("Region / City", f"{res.get('regionName')}, {res.get('city')}")
+                table.add_row("ISP / Organization", f"{res.get('isp')} / {res.get('org')}")
+                table.add_row("Coordinates", f"{res.get('lat')}, {res.get('lon')}")
+                table.add_row("Timezone", res.get("timezone", "N/A"))
+            else:
+                ip_res = requests.get("https://api.ipify.org?format=json", timeout=5).json()
+                table.add_row("Public IP", ip_res.get("ip", "Unknown"))
+        except Exception as e:
+            table.add_row("Public IP", f"[red]Failed to retrieve ({e})[/red]")
+    console.print("\n", table)
+    pause()
+
+def target_ip_lookup():
+    """Performs DNS resolution and reverse lookup on a target."""
+    show_banner()
+    console.print(Panel("[bold yellow]🌐 Target Website / Domain IP Lookup[/bold yellow]", border_style="yellow"))
+    target = console.input("[bold cyan]Enter domain or website URL (e.g. google.com): [/bold cyan]").strip()
+    if not target:
+        console.print("[red]No domain provided.[/red]")
+        pause()
+        return
+
+    clean_target = target.replace("https://", "").replace("http://", "").split("/")[0].split(":")[0]
+    try:
+        resolved_ip = socket.gethostbyname(clean_target)
+        try:
+            host_alias = socket.gethostbyaddr(resolved_ip)[0]
+        except Exception:
+            host_alias = "None / Unresolved PTR"
+        try:
+            addr_info = socket.getaddrinfo(clean_target, 80)
+            all_ips = sorted(list(set(item[4][0] for item in addr_info)))
+        except Exception:
+            all_ips = [resolved_ip]
+
+        table = Table(title=f"DNS Lookup: {clean_target}", border_style="cyan")
+        table.add_column("Property", style="bold cyan")
+        table.add_column("Value", style="bold green")
+        table.add_row("Target Domain", clean_target)
+        table.add_row("Primary IP", resolved_ip)
+        table.add_row("Resolved IP List", ", ".join(all_ips))
+        table.add_row("Reverse DNS (PTR)", host_alias)
+        console.print("\n", table)
+    except socket.gaierror:
+        console.print(f"\n[red]✘ Error: Could not resolve domain '{clean_target}'.[/red]")
+    except Exception as e:
+        console.print(f"\n[red]✘ Unexpected error: {e}[/red]")
+    pause()
+
+def geoip_lookup():
+    """Fetches GeoIP intelligence for any IP or domain."""
+    show_banner()
+    console.print(Panel("[bold yellow]🌍 GeoIP Intelligence Tracker[/bold yellow]", border_style="yellow"))
+    target = console.input("[bold cyan]Enter IP or Domain to trace (leave empty for your IP): [/bold cyan]").strip()
+    if target:
+        target = target.replace("https://", "").replace("http://", "").split("/")[0]
+    endpoint = f"http://ip-api.com/json/{target}" if target else "http://ip-api.com/json/"
+
+    with Progress(SpinnerColumn(), TextColumn("[progress.description]{task.description}"), transient=True) as progress:
+        progress.add_task(description="Querying GeoIP satellite & routing database...", total=None)
+        try:
+            res = requests.get(endpoint, timeout=6).json()
+        except Exception as e:
+            res = {"status": "fail", "message": str(e)}
+
+    if res.get("status") == "success":
+        table = Table(title=f"GeoIP Location Intel: {res.get('query')}", border_style="cyan")
+        table.add_column("Field", style="bold cyan", width=18)
+        table.add_column("Details", style="bold white")
+        table.add_row("Target IP", f"[bold green]{res.get('query')}[/bold green]")
+        table.add_row("Country", f"{res.get('country')} ({res.get('countryCode')})")
+        table.add_row("Region / State", f"{res.get('regionName')} ({res.get('region')})")
+        table.add_row("City", res.get('city', 'N/A'))
+        table.add_row("ZIP / Postal Code", res.get('zip', 'N/A'))
+        table.add_row("Coordinates (Lat, Lon)", f"{res.get('lat')}, {res.get('lon')}")
+        table.add_row("Timezone", res.get('timezone', 'N/A'))
+        table.add_row("ISP", res.get('isp', 'N/A'))
+        table.add_row("Organization", res.get('org', 'N/A'))
+        table.add_row("Autonomous System (AS)", res.get('as', 'N/A'))
+        table.add_row("Google Maps URL", f"https://www.google.com/maps?q={res.get('lat')},{res.get('lon')}")
+        console.print("\n", table)
+    else:
+        console.print(f"\n[red]✘ GeoIP lookup failed: {res.get('message', 'Target not found')}[/red]")
+    pause()
+
+def mac_lookup():
+    """Looks up MAC vendor and OUI organization."""
+    show_banner()
+    console.print(Panel("[bold yellow]🏷️ MAC Address Vendor & OUI Lookup[/bold yellow]", border_style="yellow"))
+    mac_input = console.input("[bold cyan]Enter MAC Address (e.g. 00:1A:2B:3C:4D:5E or 001A2B): [/bold cyan]").strip()
+    if not mac_input:
+        console.print("[red]No MAC address provided.[/red]")
+        pause()
+        return
+
+    clean_mac = mac_input.replace(":", "").replace("-", "").replace(".", "").upper()
+    if len(clean_mac) < 6:
+        console.print("[red]Invalid MAC format.[/red]")
+        pause()
+        return
+
+    with Progress(SpinnerColumn(), TextColumn("[progress.description]{task.description}"), transient=True) as progress:
+        progress.add_task(description="Querying IEEE OUI database...", total=None)
+        try:
+            url = f"https://api.maclookup.app/v2/macs/{clean_mac}"
+            res = requests.get(url, headers={'User-Agent': 'Mozilla/5.0'}, timeout=6).json()
+        except Exception as e:
+            res = {"found": False, "error": str(e)}
+
+    if res.get("found"):
+        table = Table(title=f"MAC Lookup: {mac_input.upper()}", border_style="cyan")
+        table.add_column("Property", style="bold cyan")
+        table.add_column("Value", style="bold green")
+        table.add_row("MAC Prefix (OUI)", res.get("macPrefix", clean_mac[:6]))
+        table.add_row("Vendor / Manufacturer", res.get("company", "Unknown Vendor"))
+        table.add_row("Country", res.get("country", "N/A"))
+        table.add_row("Address", res.get("address", "N/A"))
+        console.print("\n", table)
+    else:
+        console.print(f"\n[yellow][!] MAC address prefix not found or API limit reached.[/yellow]")
+    pause()
+
+def subnet_scanner():
+    """Calculates CIDR subnet information and performs multi-threaded alive ping sweep."""
+    show_banner()
+    console.print(Panel("[bold yellow]🖧 CIDR Subnet Calculator & Ping Sweep[/bold yellow]", border_style="yellow"))
+    cidr_input = console.input("[bold cyan]Enter Subnet in CIDR format [default: 192.168.1.0/24]: [/bold cyan]").strip()
+    if not cidr_input:
+        cidr_input = "192.168.1.0/24"
+    try:
+        network = ipaddress.ip_network(cidr_input, strict=False)
+    except ValueError as e:
+        console.print(f"\n[red]✘ Error: Invalid CIDR notation '{cidr_input}': {e}[/red]")
+        pause()
+        return
+
+    table = Table(title=f"Subnet Overview: {cidr_input}", border_style="cyan")
+    table.add_column("Parameter", style="bold cyan")
+    table.add_column("Value", style="bold green")
+    hosts = list(network.hosts())
+    table.add_row("Network Address", str(network.network_address))
+    table.add_row("Broadcast Address", str(network.broadcast_address))
+    table.add_row("Subnet Netmask", str(network.netmask))
+    table.add_row("Wildcard Mask", str(network.hostmask))
+    table.add_row("Total IP Count", str(network.num_addresses))
+    table.add_row("Usable Host IPs", str(len(hosts)))
+    if hosts:
+        table.add_row("Usable Host Range", f"{hosts[0]} - {hosts[-1]}")
+    console.print("\n", table)
+
+    run_sweep = questionary.confirm("Run high-speed multi-threaded host discovery on this subnet?", default=True, style=MENU_STYLE).ask()
+    if run_sweep:
+        if len(hosts) > 512:
+            console.print("[yellow][!] Large subnet detected. Scanning first 256 hosts...[/yellow]")
+            target_hosts = hosts[:256]
+        else:
+            target_hosts = hosts
+
+        console.print(f"\n[bold cyan][*] Sweeping {len(target_hosts)} host(s)...[/bold cyan]\n")
+        alive_hosts = []
+        def ping_host(ip):
+            ip_str = str(ip)
+            probe_ports = [80, 443, 22, 445, 135, 8080, 21, 53]
+            for port in probe_ports:
+                try:
+                    with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:
+                        s.settimeout(0.35)
+                        if s.connect_ex((ip_str, port)) == 0:
+                            return ip_str, True
+                except Exception:
+                    pass
+            return ip_str, False
+
+        start_time = time.time()
+        with ThreadPoolExecutor(max_workers=60) as executor:
+            futures = {executor.submit(ping_host, ip): ip for ip in target_hosts}
+            for future in as_completed(futures):
+                ip_str, is_alive = future.result()
+                if is_alive:
+                    console.print(f"[bold green]✔ HOST ALIVE:[/bold green] [bold white]{ip_str}[/bold white]")
+                    alive_hosts.append(ip_str)
+        elapsed = time.time() - start_time
+        console.print(f"\n[bold cyan][*] Sweep finished in {elapsed:.2f}s. Discovered {len(alive_hosts)} responsive host(s).[/bold cyan]")
+    pause()
+
+# =============================================================================
+# 3. SCANNING & FUZZING TOOLS
+# =============================================================================
+def port_scanner():
+    """Multi-threaded high speed TCP port scanner."""
+    show_banner()
+    console.print(Panel("[bold yellow]⚡ High-Speed Multi-Threaded Port Scanner[/bold yellow]", border_style="yellow"))
+    target = console.input("[bold cyan]Enter target IP or Hostname [default: 127.0.0.1]: [/bold cyan]").strip()
+    if not target: target = "127.0.0.1"
+    clean_target = target.replace("https://", "").replace("http://", "").split("/")[0].split(":")[0]
+    try:
+        target_ip = socket.gethostbyname(clean_target)
+    except socket.gaierror:
+        console.print(f"[red]✘ Error: Could not resolve hostname '{clean_target}'.[/red]")
+        pause()
+        return
+
+    port_preset = questionary.select(
+        "Select Port Range Option:",
+        choices=[
+            "1. Common Top Ports",
+            "2. Fast Scan Top 100 Ports",
+            "3. Standard Scan (1 - 1024)",
+            "4. Custom Ports or Range"
+        ], style=MENU_STYLE
+    ).ask()
+
+    if "1. Common" in port_preset:
+        ports = [21, 22, 23, 25, 53, 80, 110, 135, 139, 443, 445, 1433, 3306, 3389, 5432, 8000, 8080, 8443]
+    elif "2. Fast" in port_preset:
+        ports = list(range(1, 101))
+    elif "3. Standard" in port_preset:
+        ports = list(range(1, 1025))
+    else:
+        custom_input = console.input("[bold cyan]Enter ports (e.g. 21,22,80 or 1-500): [/bold cyan]").strip()
+        if "-" in custom_input:
+            try:
+                start_p, end_p = map(int, custom_input.split("-"))
+                ports = list(range(max(1, start_p), min(65535, end_p) + 1))
+            except ValueError:
+                ports = [21, 22, 80, 443, 3306, 8080]
+        else:
+            try:
+                ports = [int(p.strip()) for p in custom_input.split(",") if p.strip()]
+            except ValueError:
+                ports = [21, 22, 80, 443, 3306, 8080]
+
+    console.print(f"\n[bold cyan][*] Launching scan on {clean_target} ({target_ip}) across {len(ports)} port(s)...[/bold cyan]\n")
+    
+    def scan_port(ip, port):
+        try:
+            with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:
+                s.settimeout(0.8)
+                if s.connect_ex((ip, port)) == 0:
+                    try: service = socket.getservbyport(port, "tcp")
+                    except Exception: service = "unknown"
+                    return port, True, service
+        except Exception: pass
+        return port, False, None
+
+    open_ports = []
+    start_time = time.time()
+    max_threads = min(120, len(ports)) if ports else 1
+    with ThreadPoolExecutor(max_workers=max_threads) as executor:
+        futures = {executor.submit(scan_port, target_ip, p): p for p in ports}
+        for future in as_completed(futures):
+            port, is_open, service = future.result()
+            if is_open:
+                console.print(f"[bold green]✔ OPEN[/bold green] - Port [cyan]{port:<5}/tcp[/cyan] ({service})")
+                open_ports.append((port, service))
+    open_ports.sort(key=lambda x: x[0])
+    elapsed = time.time() - start_time
+    
+    table = Table(title=f"Scan Summary for {clean_target}", border_style="cyan")
+    table.add_column("Port", style="bold cyan", width=10)
+    table.add_column("Status", style="bold green", width=12)
+    table.add_column("Service Name", style="bold white")
+    for port, service in open_ports:
+        table.add_row(f"{port}/tcp", "OPEN", service)
+    console.print("\n", table)
+    console.print(f"[bold cyan][*] Scan finished in {elapsed:.2f}s.[/bold cyan]")
+    pause()
+
+def subdomain_finder():
+    """Multi-threaded Subdomain & DNS Enumeration."""
+    show_banner()
+    console.print(Panel("[bold yellow]🕵️ Subdomain Finder & DNS Recon[/bold yellow]", border_style="yellow"))
+    domain = console.input("[bold cyan]Enter target domain (e.g. google.com): [/bold cyan]").strip()
+    if not domain:
+        console.print("[red]No domain specified.[/red]")
+        pause()
+        return
+    domain = domain.replace("https://", "").replace("http://", "").split("/")[0].split(":")[0]
+    
+    default_subdomains = ["www", "mail", "remote", "blog", "webmail", "server", "ns1", "ns2", "smtp", "secure", "vpn", "api", "dev", "staging", "test", "portal", "admin", "panel", "app", "cdn", "cloud", "shop", "m", "support", "beta", "git", "db", "dashboard", "status", "auth", "login", "v1", "backend", "internal", "corp", "assets", "monitor", "ftp", "ssh", "direct", "gateway", "proxy", "jenkins", "gitlab", "jira", "s3"]
+    custom_input = console.input("[bold cyan]Enter custom subdomains separated by comma (leave blank for default): [/bold cyan]").strip()
+    subdomains = [s.strip() for s in custom_input.split(",") if s.strip()] if custom_input else default_subdomains
+
+    console.print(f"\n[bold cyan][*] Enumerating {len(subdomains)} subdomains for {domain}...[/bold cyan]\n")
+    def check_sub(sub):
+        target_host = f"{sub}.{domain}"
+        try:
+            ip = socket.gethostbyname(target_host)
+            return target_host, ip
+        except socket.gaierror:
+            return target_host, None
+
+    found_subs = []
+    start_time = time.time()
+    with ThreadPoolExecutor(max_workers=50) as executor:
+        futures = {executor.submit(check_sub, sub): sub for sub in subdomains}
+        for future in as_completed(futures):
+            target_host, ip = future.result()
+            if ip:
+                console.print(f"[bold green]✔ FOUND:[/bold green] [bold cyan]{target_host:<32}[/bold cyan] -> [white]{ip}[/white]")
+                found_subs.append((target_host, ip))
+    elapsed = time.time() - start_time
+    console.print(f"\n[bold cyan][*] DNS Recon complete in {elapsed:.2f}s.[/bold cyan]")
+    pause()
+
+def dir_fuzzer():
+    """Multi-threaded Web Directory & Endpoint Fuzzer."""
+    show_banner()
+    console.print(Panel("[bold yellow]⚡ Web Directory & Path Fuzzer[/bold yellow]", border_style="yellow"))
+    target = console.input("[bold cyan]Enter target URL/Host: [/bold cyan]").strip()
+    if not target:
+        console.print("[red]No target specified.[/red]")
+        pause()
+        return
+    base_url = target if target.startswith(("http://", "https://")) else "http://" + target
+    base_url = base_url.rstrip("/")
+    
+    default_paths = ["/admin", "/login", "/dashboard", "/.env", "/config.php", "/robots.txt", "/api", "/api/v1", "/backup", "/uploads", "/.git", "/swagger.json", "/health", "/console", "/actuator", "/graphql"]
+    custom_paths = console.input("[bold cyan]Enter paths separated by comma (leave blank for built-in): [/bold cyan]").strip()
+    wordlist = [p.strip() if p.strip().startswith("/") else "/" + p.strip() for p in custom_paths.split(",") if p.strip()] if custom_paths else default_paths
+
+    console.print(f"\n[bold cyan][*] Fuzzing {len(wordlist)} paths against {base_url}...[/bold cyan]\n")
+    def scan_path(path):
+        url = base_url + path
+        try:
+            r = requests.get(url, headers={'User-Agent': 'Mozilla/5.0'}, timeout=4, allow_redirects=False)
+            return path, r.status_code, len(r.content)
+        except Exception:
+            return path, None, 0
+
+    found_paths = []
+    start_time = time.time()
+    with ThreadPoolExecutor(max_workers=30) as executor:
+        futures = {executor.submit(scan_path, path): path for path in wordlist}
+        for future in as_completed(futures):
+            path, status, length = future.result()
+            if status and status != 404:
+                status_style = "bold green" if status == 200 else "bold cyan" if status in (301, 302) else "bold yellow" if status in (401, 403) else "dim white"
+                console.print(f"[{status_style}]✔ {status:<15}[/{status_style}] | Path: [cyan]{base_url + path:<45}[/cyan]")
+                found_paths.append((path, status, length))
+    elapsed = time.time() - start_time
+    console.print(f"\n[bold cyan][*] Fuzzing finished in {elapsed:.2f}s.[/bold cyan]")
+    pause()
+
+def header_inspector():
+    """Inspects HTTP response headers and conducts automated security headers audit."""
+    show_banner()
+    console.print(Panel("[bold yellow]🔍 HTTP Header Inspector & Security Auditor[/bold yellow]", border_style="yellow"))
+    url = console.input("[bold cyan]Enter URL: [/bold cyan]").strip()
+    if not url:
+        console.print("[red]No URL provided.[/red]")
+        pause()
+        return
+    if not url.startswith(("http://", "https://")): url = "https://" + url
+    
+    try:
+        response = requests.get(url, headers={'User-Agent': 'Mozilla/5.0'}, timeout=6, allow_redirects=True)
+        headers_table = Table(title="HTTP Response Headers", border_style="cyan")
+        headers_table.add_column("Header", style="bold cyan")
+        headers_table.add_column("Value", style="white")
+        for key, val in response.headers.items():
+            headers_table.add_row(key, val)
+        console.print(headers_table)
+
+        security_headers = {
+            "Strict-Transport-Security": "Protects against MITM",
+            "Content-Security-Policy": "Mitigates XSS",
+            "X-Frame-Options": "Prevents Clickjacking",
+            "X-Content-Type-Options": "Stops MIME-sniffing"
+        }
+        audit_table = Table(title="Security Headers Audit", border_style="yellow")
+        audit_table.add_column("Security Header", style="bold cyan", width=28)
+        audit_table.add_column("Status", width=12)
+        for sh, desc in security_headers.items():
+            status = "[bold green]✔ PRESENT[/bold green]" if sh.lower() in [h.lower() for h in response.headers] else "[bold red]✘ MISSING[/bold red]"
+            audit_table.add_row(sh, status)
+        console.print("\n", audit_table)
+    except Exception as e:
+        console.print(f"[bold red]✘ Connection error: {e}[/bold red]")
+    pause()
+
+# =============================================================================
+# 4. EXTRA NETWORK DIAGNOSTIC TOOLS
+# =============================================================================
+def dns_record_lookup():
+    """Looks up common DNS records using the system resolver tools."""
+    show_banner()
+    console.print(Panel("[bold yellow]DNS Record Lookup[/bold yellow]", border_style="yellow"))
+    domain = clean_host(console.input("[bold cyan]Enter domain (e.g. example.com): [/bold cyan]"))
+    if not domain:
+        console.print("[red]No domain provided.[/red]")
+        pause()
+        return
+
+    record_choices = ["A", "AAAA", "MX", "NS", "TXT", "SOA", "CNAME"]
+    selected = questionary.checkbox(
+        "Select DNS record types:",
+        choices=record_choices,
+        default=["A", "AAAA", "MX", "NS", "TXT"],
+        style=MENU_STYLE
+    ).ask()
+    if not selected:
+        selected = ["A"]
+
+    table = Table(title=f"DNS Records: {domain}", border_style="cyan")
+    table.add_column("Type", style="bold cyan", width=8)
+    table.add_column("Result", style="white")
+
+    for record_type in selected:
+        if os.name == "nt":
+            output, _ = run_command(["nslookup", f"-type={record_type}", domain])
+        else:
+            output, _ = run_command(["dig", "+short", domain, record_type])
+            if not output:
+                output, _ = run_command(["nslookup", f"-type={record_type}", domain])
+        table.add_row(record_type, output or "No records found")
+
+    console.print("\n", table)
+    pause()
+
+def http_status_checker():
+    """Checks HTTP status, redirects, server headers, and response timing."""
+    show_banner()
+    console.print(Panel("[bold yellow]HTTP Status & Redirect Checker[/bold yellow]", border_style="yellow"))
+    raw_url = console.input("[bold cyan]Enter URL or host: [/bold cyan]").strip()
+    url = ensure_url(raw_url)
+    if not url:
+        console.print("[red]No URL provided.[/red]")
+        pause()
+        return
+
+    try:
+        start_time = time.perf_counter()
+        response = requests.get(url, headers={"User-Agent": "Mozilla/5.0"}, timeout=10, allow_redirects=True)
+        elapsed_ms = (time.perf_counter() - start_time) * 1000
+
+        table = Table(title=f"HTTP Check: {url}", border_style="cyan")
+        table.add_column("Property", style="bold cyan")
+        table.add_column("Value", style="bold white")
+        table.add_row("Final URL", response.url)
+        table.add_row("Status Code", str(response.status_code))
+        table.add_row("Reason", response.reason)
+        table.add_row("Response Time", f"{elapsed_ms:.1f} ms")
+        table.add_row("Content Length", response.headers.get("Content-Length", str(len(response.content))))
+        table.add_row("Content Type", response.headers.get("Content-Type", "N/A"))
+        table.add_row("Server", response.headers.get("Server", "N/A"))
+        console.print("\n", table)
+
+        if response.history:
+            redirects = Table(title="Redirect Chain", border_style="yellow")
+            redirects.add_column("#", style="bold cyan", width=4)
+            redirects.add_column("Status", style="bold yellow", width=8)
+            redirects.add_column("URL", style="white")
+            for idx, item in enumerate(response.history, start=1):
+                redirects.add_row(str(idx), str(item.status_code), item.url)
+            redirects.add_row(str(len(response.history) + 1), str(response.status_code), response.url)
+            console.print("\n", redirects)
+    except requests.RequestException as e:
+        console.print(f"[bold red]Connection error: {e}[/bold red]")
+    pause()
+
+def tech_stack_detector():
+    """Detects likely web technologies, CDN/WAF hints, cookies, and metadata."""
+    show_banner()
+    console.print(Panel("[bold yellow]HTTP Tech Stack Detector[/bold yellow]", border_style="yellow"))
+    raw_url = console.input("[bold cyan]Enter URL or host: [/bold cyan]").strip()
+    url = ensure_url(raw_url)
+    if not url:
+        console.print("[red]No URL provided.[/red]")
+        pause()
+        return
+
+    try:
+        response = requests.get(url, headers={"User-Agent": "Mozilla/5.0"}, timeout=12, allow_redirects=True)
+    except requests.RequestException as e:
+        console.print(f"[bold red]Connection error: {e}[/bold red]")
+        pause()
+        return
+
+    headers = response.headers
+    header_text = "\n".join(f"{k}: {v}" for k, v in headers.items()).lower()
+    body = response.text[:250000]
+    body_lower = body.lower()
+    detections = []
+
+    header_hints = {
+        "Server": headers.get("Server"),
+        "X-Powered-By": headers.get("X-Powered-By"),
+        "Via": headers.get("Via"),
+        "X-Generator": headers.get("X-Generator"),
+        "X-AspNet-Version": headers.get("X-AspNet-Version"),
+    }
+    for name, value in header_hints.items():
+        if value:
+            detections.append((name, value, "Header"))
+
+    cdn_patterns = [
+        ("Cloudflare", ["cf-ray", "cf-cache-status", "__cf_bm", "cloudflare"]),
+        ("Akamai", ["akamai", "akamaighost", "x-akamai"]),
+        ("Fastly", ["fastly", "x-served-by", "x-cache-hits"]),
+        ("Amazon CloudFront", ["cloudfront", "x-amz-cf-id", "x-amz-cf-pop"]),
+        ("Azure Front Door", ["azurefd", "x-azure-ref"]),
+        ("Vercel", ["vercel", "x-vercel-id"]),
+        ("Netlify", ["netlify", "x-nf-request-id"]),
+    ]
+    for tech, needles in cdn_patterns:
+        if any(needle in header_text for needle in needles):
+            detections.append((tech, "CDN/WAF/proxy hint", "Header"))
+
+    body_patterns = [
+        ("WordPress", ["wp-content", "wp-includes", "wp-json"]),
+        ("Drupal", ["drupal-settings-json", "/sites/default/"]),
+        ("Joomla", ["content=\"joomla", "/media/system/js/"]),
+        ("React", ["reactroot", "__react", "react-dom"]),
+        ("Next.js", ["__next_data__", "/_next/static/"]),
+        ("Vue.js", ["__vue__", "vue.js", "data-v-"]),
+        ("Angular", ["ng-version", "ng-app", "angular.js"]),
+        ("Svelte", ["svelte-"]),
+        ("jQuery", ["jquery"]),
+        ("Bootstrap", ["bootstrap.min.css", "bootstrap.min.js"]),
+        ("Tailwind CSS", ["tailwind"]),
+        ("Shopify", ["cdn.shopify.com", "shopify-features"]),
+        ("Laravel", ["laravel_session"]),
+        ("Django", ["csrftoken", "django"]),
+    ]
+    for tech, needles in body_patterns:
+        if any(needle in body_lower for needle in needles):
+            detections.append((tech, "Matched page/source marker", "Body/Cookie"))
+
+    generator_match = re.search(
+        r'<meta[^>]+name=["\']generator["\'][^>]+content=["\']([^"\']+)["\']',
+        body,
+        re.IGNORECASE,
+    )
+    if generator_match:
+        detections.append(("Meta generator", generator_match.group(1), "HTML"))
+
+    script_hosts = sorted(set(re.findall(r'<script[^>]+src=["\']https?://([^/"\']+)', body, re.IGNORECASE)))
+    css_hosts = sorted(set(re.findall(r'<link[^>]+href=["\']https?://([^/"\']+)', body, re.IGNORECASE)))
+
+    summary = Table(title=f"Tech Stack Hints: {response.url}", border_style="cyan")
+    summary.add_column("Technology / Signal", style="bold cyan")
+    summary.add_column("Evidence", style="white")
+    summary.add_column("Source", style="bold yellow", width=14)
+    seen = set()
+    for name, evidence, source in detections:
+        key = (name, evidence, source)
+        if key not in seen:
+            summary.add_row(name, str(evidence), source)
+            seen.add(key)
+    if not seen:
+        summary.add_row("No strong fingerprint", "Review raw headers/source manually", "N/A")
+    console.print("\n", summary)
+
+    assets = Table(title="External Asset Hosts", border_style="yellow")
+    assets.add_column("Type", style="bold cyan", width=10)
+    assets.add_column("Hosts", style="white")
+    assets.add_row("Scripts", "\n".join(script_hosts[:20]) if script_hosts else "None found")
+    assets.add_row("Styles", "\n".join(css_hosts[:20]) if css_hosts else "None found")
+    console.print("\n", assets)
+
+    cookie_table = Table(title="Cookie Security Flags", border_style="magenta")
+    cookie_table.add_column("Cookie", style="bold cyan")
+    cookie_table.add_column("Secure", style="bold green")
+    cookie_table.add_column("HttpOnly", style="bold green")
+    cookie_table.add_column("SameSite", style="bold green")
+    raw_cookies = headers.get("Set-Cookie", "")
+    if raw_cookies:
+        for cookie_part in re.split(r", (?=[^;,]+=)", raw_cookies)[:20]:
+            name = cookie_part.split("=", 1)[0]
+            lower_cookie = cookie_part.lower()
+            same_site = re.search(r"samesite=([^;]+)", cookie_part, re.IGNORECASE)
+            cookie_table.add_row(
+                name,
+                "yes" if "secure" in lower_cookie else "no",
+                "yes" if "httponly" in lower_cookie else "no",
+                same_site.group(1) if same_site else "missing",
+            )
+    else:
+        cookie_table.add_row("None", "N/A", "N/A", "N/A")
+    console.print("\n", cookie_table)
+    pause()
+
+def web_endpoint_auditor():
+    """Audits well-known web endpoints, methods, CORS, and cookie flags."""
+    show_banner()
+    console.print(Panel("[bold yellow]Web Endpoint Auditor[/bold yellow]", border_style="yellow"))
+    raw_url = console.input("[bold cyan]Enter URL or host: [/bold cyan]").strip()
+    base_url = ensure_url(raw_url).rstrip("/")
+    if not base_url:
+        console.print("[red]No URL provided.[/red]")
+        pause()
+        return
+
+    session = requests.Session()
+    session.headers.update({"User-Agent": "Mozilla/5.0"})
+    paths = [
+        ("robots.txt", "/robots.txt", "Public crawl rules"),
+        ("sitemap.xml", "/sitemap.xml", "Public URL index"),
+        ("security.txt", "/.well-known/security.txt", "Security contact policy"),
+        ("change-password", "/.well-known/change-password", "Password-change discovery"),
+        ("humans.txt", "/humans.txt", "Site/team metadata"),
+        ("favicon.ico", "/favicon.ico", "Site fingerprint asset"),
+        (".env", "/.env", "Sensitive config exposure"),
+        (".git HEAD", "/.git/HEAD", "Sensitive repository exposure"),
+        ("server-status", "/server-status", "Sensitive Apache status exposure"),
+    ]
+
+    results = Table(title=f"Endpoint Audit: {base_url}", border_style="cyan")
+    results.add_column("Endpoint", style="bold cyan")
+    results.add_column("Status", style="bold yellow", width=10)
+    results.add_column("Bytes", style="white", width=10)
+    results.add_column("Notes", style="white")
+
+    for label, path, note in paths:
+        try:
+            response = session.get(base_url + path, timeout=7, allow_redirects=False)
+            status = response.status_code
+            length = len(response.content)
+            warning = note
+            if path in ("/.env", "/.git/HEAD", "/server-status") and status == 200:
+                warning = f"[bold red]POSSIBLE EXPOSURE[/bold red] - {note}"
+            elif status in (401, 403):
+                warning = f"Protected - {note}"
+            elif status in (301, 302, 307, 308):
+                warning = f"Redirects to {response.headers.get('Location', 'unknown')}"
+            results.add_row(label, str(status), str(length), warning)
+        except requests.RequestException as e:
+            results.add_row(label, "ERR", "0", str(e))
+    console.print("\n", results)
+
+    try:
+        options_response = session.options(
+            base_url,
+            timeout=7,
+            headers={"Origin": "https://example.com", "Access-Control-Request-Method": "GET"},
+            allow_redirects=False,
+        )
+        methods = options_response.headers.get("Allow", options_response.headers.get("Access-Control-Allow-Methods", "Not advertised"))
+        cors_origin = options_response.headers.get("Access-Control-Allow-Origin", "Not advertised")
+        cors_creds = options_response.headers.get("Access-Control-Allow-Credentials", "Not advertised")
+
+        policy = Table(title="HTTP Methods & CORS", border_style="yellow")
+        policy.add_column("Check", style="bold cyan")
+        policy.add_column("Result", style="white")
+        policy.add_row("OPTIONS Status", str(options_response.status_code))
+        policy.add_row("Allowed Methods", methods)
+        policy.add_row("CORS Origin", cors_origin)
+        policy.add_row("CORS Credentials", cors_creds)
+        if cors_origin == "*" and cors_creds.lower() == "true":
+            policy.add_row("CORS Risk", "[bold red]Wildcard origin with credentials advertised[/bold red]")
+        console.print("\n", policy)
+    except requests.RequestException as e:
+        console.print(f"[yellow][!] OPTIONS/CORS check failed: {e}[/yellow]")
+
+    try:
+        home = session.get(base_url, timeout=7, allow_redirects=True)
+        cookie_table = Table(title="Homepage Cookie Flags", border_style="magenta")
+        cookie_table.add_column("Cookie", style="bold cyan")
+        cookie_table.add_column("Secure", style="bold green")
+        cookie_table.add_column("HttpOnly", style="bold green")
+        cookie_table.add_column("SameSite", style="bold green")
+        raw_cookies = home.headers.get("Set-Cookie", "")
+        if raw_cookies:
+            for cookie_part in re.split(r", (?=[^;,]+=)", raw_cookies)[:20]:
+                name = cookie_part.split("=", 1)[0]
+                lower_cookie = cookie_part.lower()
+                same_site = re.search(r"samesite=([^;]+)", cookie_part, re.IGNORECASE)
+                cookie_table.add_row(
+                    name,
+                    "yes" if "secure" in lower_cookie else "no",
+                    "yes" if "httponly" in lower_cookie else "no",
+                    same_site.group(1) if same_site else "missing",
+                )
+        else:
+            cookie_table.add_row("None", "N/A", "N/A", "N/A")
+        console.print("\n", cookie_table)
+    except requests.RequestException as e:
+        console.print(f"[yellow][!] Cookie check failed: {e}[/yellow]")
+    pause()
+
+def tcp_ping_tool():
+    """Measures TCP connection latency to a host and port."""
+    show_banner()
+    console.print(Panel("[bold yellow]TCP Ping / Latency Tester[/bold yellow]", border_style="yellow"))
+    host = clean_host(console.input("[bold cyan]Enter host or IP [default: 127.0.0.1]: [/bold cyan]")) or "127.0.0.1"
+    try:
+        port = int(console.input("[bold cyan]Enter TCP port [default: 443]: [/bold cyan]").strip() or 443)
+        attempts = int(console.input("[bold cyan]Enter attempts [default: 5]: [/bold cyan]").strip() or 5)
+    except ValueError:
+        console.print("[yellow][!] Invalid number entered. Using port 443 and 5 attempts.[/yellow]")
+        port, attempts = 443, 5
+
+    attempts = max(1, min(attempts, 25))
+    results = []
+    console.print(f"\n[bold cyan][*] Testing TCP connectivity to {host}:{port}...[/bold cyan]\n")
+
+    for attempt in range(1, attempts + 1):
+        start_time = time.perf_counter()
+        try:
+            with socket.create_connection((host, port), timeout=3):
+                elapsed_ms = (time.perf_counter() - start_time) * 1000
+                results.append(elapsed_ms)
+                console.print(f"[bold green]OPEN[/bold green] attempt {attempt}: {elapsed_ms:.1f} ms")
+        except Exception as e:
+            console.print(f"[bold red]FAILED[/bold red] attempt {attempt}: {e}")
+        time.sleep(0.2)
+
+    if results:
+        table = Table(title=f"Latency Summary: {host}:{port}", border_style="cyan")
+        table.add_column("Metric", style="bold cyan")
+        table.add_column("Value", style="bold white")
+        table.add_row("Successful Attempts", f"{len(results)}/{attempts}")
+        table.add_row("Minimum", f"{min(results):.1f} ms")
+        table.add_row("Average", f"{sum(results) / len(results):.1f} ms")
+        table.add_row("Maximum", f"{max(results):.1f} ms")
+        console.print("\n", table)
+    pause()
+
+def listening_ports():
+    """Displays local listening TCP/UDP ports using OS networking tools."""
+    show_banner()
+    console.print(Panel("[bold yellow]Local Listening Ports Viewer[/bold yellow]", border_style="yellow"))
+    if os.name == "nt":
+        cmd = ["netstat", "-ano"]
+        filter_text = "LISTENING"
+    else:
+        cmd = ["ss", "-tulpen"]
+        filter_text = "LISTEN"
+
+    output, code = run_command(cmd, timeout=15)
+    if code == 127 and os.name != "nt":
+        output, code = run_command(["netstat", "-tulpen"], timeout=15)
+
+    lines = [line for line in output.splitlines() if filter_text.lower() in line.lower()]
+    if not lines:
+        console.print(output or "[yellow]No listening ports found.[/yellow]")
+        pause()
+        return
+
+    table = Table(title="Listening Ports", border_style="cyan")
+    table.add_column("Raw Entry", style="white")
+    for line in lines[:200]:
+        table.add_row(line.strip())
+    console.print("\n", table)
+    if len(lines) > 200:
+        console.print(f"[yellow][!] Showing first 200 of {len(lines)} listening entries.[/yellow]")
+    pause()
+
+# =============================================================================
+# 5. NETWORK TRAFFIC & LIVE PACKET SNIFFING
+# =============================================================================
+def packet_sniffer():
+    """Real-time live packet sniffer with IP header decoding."""
+    show_banner()
+    console.print(Panel("[bold yellow]🦈 Real-Time Live Packet Sniffer[/bold yellow]", border_style="yellow"))
+    console.print("[dim yellow]Note: Windows requires running terminal as Administrator.[/dim yellow]\n")
+    try:
+        max_packets = int(console.input("[bold cyan]Enter number of packets to capture [default: 15]: [/bold cyan]").strip() or 15)
+    except ValueError:
+        max_packets = 15
+
+    console.print(f"\n[bold red]⚡ Listening for incoming network packets... (Ctrl+C to stop)[/bold red]\n")
+    sniffer = None
+    try:
+        if os.name == 'nt':
+            sniffer = socket.socket(socket.AF_INET, socket.SOCK_RAW, socket.IPPROTO_IP)
+            host_ip = socket.gethostbyname(socket.gethostname())
+            sniffer.bind((host_ip, 0))
+            sniffer.setsockopt(socket.IPPROTO_IP, socket.IP_HDRINCL, 1)
+            sniffer.ioctl(socket.SIO_RCVALL, socket.RCVALL_ON)
+        else:
+            sniffer = socket.socket(socket.AF_INET, socket.SOCK_RAW, socket.IPPROTO_TCP)
+
+        protocol_map = {1: "ICMP", 2: "IGMP", 6: "TCP", 17: "UDP"}
+        for i in range(1, max_packets + 1):
+            raw_data, addr = sniffer.recvfrom(65535)
+            src_ip, dst_ip, proto_name = addr[0], "Local Machine", "RAW"
+            if len(raw_data) >= 20:
+                iph = struct.unpack('!BBHHHBBH4s4s', raw_data[:20])
+                proto_name = protocol_map.get(iph[6], f"Proto-{iph[6]}")
+                src_ip = socket.inet_ntoa(iph[8])
+                dst_ip = socket.inet_ntoa(iph[9])
+            console.print(f"[bold green]✔ Packet #{i:02d}[/bold green] | [cyan]{src_ip}[/cyan] -> [magenta]{dst_ip}[/magenta] | [yellow]{proto_name:<5}[/yellow] | {len(raw_data)} bytes")
+    except PermissionError:
+        console.print("[bold red]✘ Permission Denied: Run as Administrator / root![/bold red]")
+    except KeyboardInterrupt:
+        console.print("\n[yellow][!] Sniffing stopped by user.[/yellow]")
+    except Exception as e:
+        console.print(f"[bold red]✘ Sniffer Error: {e}[/bold red]")
+    finally:
+        if sniffer and os.name == 'nt':
+            try: sniffer.ioctl(socket.SIO_RCVALL, socket.RCVALL_OFF)
+            except Exception: pass
+    pause()
+
+# =============================================================================
+# 5. ADVANCED SERIOUS NETWORK TOOLS
+# =============================================================================
+def ssl_inspector():
+    """Inspects SSL/TLS certificates for a given domain."""
+    show_banner()
+    console.print(Panel("[bold yellow]📜 SSL/TLS Certificate Inspector[/bold yellow]", border_style="yellow"))
+    domain = console.input("[bold cyan]Enter domain (e.g. google.com): [/bold cyan]").strip()
+    if not domain:
+        console.print("[red]No domain provided.[/red]")
+        pause()
+        return
+    domain = domain.replace("https://", "").replace("http://", "").split("/")[0].split(":")[0]
+    
+    console.print(f"\n[bold cyan][*] Fetching SSL certificate for {domain}...[/bold cyan]\n")
+    try:
+        context = ssl.create_default_context()
+        with socket.create_connection((domain, 443), timeout=5) as sock:
+            with context.wrap_socket(sock, server_hostname=domain) as ssock:
+                cert = ssock.getpeercert()
+                
+        table = Table(title=f"SSL Certificate Details: {domain}", border_style="cyan")
+        table.add_column("Property", style="bold cyan")
+        table.add_column("Value", style="bold white")
+        
+        subject = dict(x[0] for x in cert['subject'])
+        issuer = dict(x[0] for x in cert['issuer'])
+        
+        table.add_row("Subject (CN)", subject.get('commonName', 'N/A'))
+        table.add_row("Issuer (CN)", issuer.get('commonName', 'N/A'))
+        table.add_row("Organization", subject.get('organizationName', 'N/A'))
+        table.add_row("Valid From", cert.get('notBefore', 'N/A'))
+        table.add_row("Valid Until", cert.get('notAfter', 'N/A'))
+        table.add_row("Serial Number", cert.get('serialNumber', 'N/A'))
+        
+        sans = [san for type_, san in cert.get('subjectAltName', []) if type_ == 'DNS']
+        table.add_row("Subject Alt Names (SANs)", "\n".join(sans) if sans else "None")
+        console.print(table)
+    except ssl.SSLCertVerificationError as e:
+        console.print(f"[bold red]✘ SSL Verification Failed: {e}[/bold red]")
+    except Exception as e:
+        console.print(f"[bold red]✘ Error fetching certificate: {e}[/bold red]")
+    pause()
+
+def whois_lookup():
+    """Fetches RDAP/WHOIS domain registration data."""
+    show_banner()
+    console.print(Panel("[bold yellow]🕸️ RDAP / WHOIS Domain Intelligence[/bold yellow]", border_style="yellow"))
+    domain = console.input("[bold cyan]Enter domain (e.g. example.com): [/bold cyan]").strip()
+    if not domain:
+        console.print("[red]No domain provided.[/red]")
+        pause()
+        return
+    domain = domain.replace("https://", "").replace("http://", "").split("/")[0].split(":")[0]
+    
+    console.print(f"\n[bold cyan][*] Querying RDAP registry for {domain}...[/bold cyan]\n")
+    try:
+        url = f"https://rdap.org/domain/{domain}"
+        res = requests.get(url, headers={'User-Agent': 'Mozilla/5.0'}, timeout=8).json()
+        
+        table = Table(title=f"Domain Registration Data: {domain}", border_style="cyan")
+        table.add_column("Property", style="bold cyan")
+        table.add_column("Value", style="bold white")
+        
+        table.add_row("Handle", res.get('handle', 'N/A'))
+        table.add_row("LDH Name", res.get('ldhName', 'N/A'))
+        table.add_row("Status", ", ".join(res.get('status', [])))
+        
+        for event in res.get('events', []):
+            table.add_row(f"Event: {event.get('eventAction', 'Unknown')}", event.get('eventDate', 'N/A'))
+            
+        for entity in res.get('entities', []):
+            roles = entity.get('roles', [])
+            vcard_array = entity.get('vcardArray', [None, []])[1]
+            fn = next((v[3] for v in vcard_array if v[0] == 'fn'), "Unknown")
+            table.add_row(f"Entity ({', '.join(roles)})", fn)
+            
+        ns_list = [ns.get('ldhName') for ns in res.get('nameservers', []) if ns.get('ldhName')]
+        table.add_row("Nameservers", "\n".join(ns_list) if ns_list else "N/A")
+        console.print(table)
+    except Exception as e:
+        console.print(f"[bold red]✘ Error parsing RDAP data: {e}[/bold red]")
+    pause()
+
+def traceroute_tool():
+    """Executes system traceroute/tracert."""
+    show_banner()
+    console.print(Panel("[bold yellow]🛤️ Traceroute & Route Analysis[/bold yellow]", border_style="yellow"))
+    target = console.input("[bold cyan]Enter target IP or Domain: [/bold cyan]").strip()
+    if not target:
+        console.print("[red]No target provided.[/red]")
+        pause()
+        return
+        
+    console.print(f"\n[bold cyan][*] Running traceroute to {target}...[/bold cyan]\n")
+    try:
+        cmd = ['tracert', '-d', '-w', '2', '-h', '30', target] if os.name == 'nt' else ['traceroute', '-n', '-w', '2', '-m', '30', target]
+        process = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True, encoding='utf-8', errors='replace')
+        for line in process.stdout:
+            console.print(f"[dim]{line.strip()}[/dim]")
+        process.wait()
+    except FileNotFoundError:
+        console.print("[bold red]✘ Traceroute command not found on this system.[/bold red]")
+    except Exception as e:
+        console.print(f"[bold red]✘ Error: {e}[/bold red]")
+    pause()
+
+def network_interfaces():
+    """Displays network interfaces and ARP table."""
+    show_banner()
+    console.print(Panel("[bold yellow]📡 Network Interfaces & ARP Table[/bold yellow]", border_style="yellow"))
+    try:
+        if os.name == 'nt':
+            cmd_ip, cmd_arp = ['ipconfig', '/all'], ['arp', '-a']
+        else:
+            cmd_ip = ['ip', 'addr'] if os.path.exists('/sbin/ip') else ['ifconfig']
+            cmd_arp = ['ip', 'neigh'] if os.path.exists('/sbin/ip') else ['arp', '-a']
+            
+        console.print(Panel("[bold green]IP Configuration[/bold green]", border_style="green"))
+        console.print(f"[dim]{subprocess.run(cmd_ip, capture_output=True, text=True, encoding='utf-8', errors='replace').stdout}[/dim]")
+        
+        console.print(Panel("[bold green]ARP / Neighbor Table[/bold green]", border_style="green"))
+        console.print(f"[dim]{subprocess.run(cmd_arp, capture_output=True, text=True, encoding='utf-8', errors='replace').stdout}[/dim]")
+    except Exception as e:
+        console.print(f"[bold red]✘ Error fetching network info: {e}[/bold red]")
+    pause()
+
+# =============================================================================
+# 6. ACTIVATION & MAIN MENU
+# =============================================================================
+def activation_screen():
+    """Welcome screen and activation animation."""
+    show_banner()
+    name = console.input("[bold cyan]Hi user, what is your name? [/bold cyan]").strip()
+    if not name:
+        name = "Operative"
+    console.print(f"\n[bold green]Welcome {name}![/bold green] Ready to access the Super Toolkit.\n")
+    
+    for _ in track(range(100), description="[bold cyan]please wait...[/bold cyan]"):
+        time.sleep(0.008)
+    time.sleep(0.3)
+
+def main():
+    """Main interactive loop."""
+    try:
+        activation_screen()
+    except (KeyboardInterrupt, EOFError):
+        clear_screen()
+        sys.exit(0)
+
+    while True:
+        try:
+            show_banner()
+            options = [
+                "1.  🔑 Password Generator & Security Evaluator",
+                "2.  🔒 Hash Generator & Verifier (MD5, SHA-256, SHA-512...)",
+                "3.  📡 My Network & Public IP Information",
+                "4.  🌐 Target Domain / Website IP & DNS Lookup",
+                "5.  🌍 GeoIP Intelligence Location Tracker",
+                "6.  🏷️  MAC Address Vendor & OUI Lookup",
+                "7.  🖧  CIDR Subnet Calculator & Ping Sweep",
+                "8.  ⚡ Multi-Threaded Port Scanner (with Service Detection)",
+                "9.  🕵️ Subdomain Finder & DNS Recon",
+                "10. 📁 Web Directory & Endpoint Fuzzer",
+                "11. 🔍 HTTP Header Inspector & Security Auditor",
+                "12. 🦈 Real-Time Live Packet Sniffer",
+                "13. 📜 SSL/TLS Certificate Inspector",
+                "14. 🕸️ RDAP / WHOIS Domain Intelligence",
+                "15. 🛤️ Traceroute & Route Analysis",
+                "16. 📡 Network Interfaces & ARP Table Analyzer",
+                "0.  🚪 Exit Super Toolkit",
+            ]
+            options = [
+                "1. Password Generator - Create strong passwords and estimate strength",
+                "2. Hash Generator & Verifier - Generate or verify MD5/SHA hashes",
+                "3. My Network Info - Show local/public IP and geolocation summary",
+                "4. Domain IP Lookup - Resolve domains and reverse DNS records",
+                "5. GeoIP Tracker - Locate an IP or domain by public GeoIP data",
+                "6. MAC Vendor Lookup - Identify manufacturer from a MAC/OUI prefix",
+                "7. Subnet Calculator & Sweep - Calculate CIDR details and find live hosts",
+                "8. Port Scanner - Scan TCP ports and identify common services",
+                "9. Subdomain Finder - Resolve common subdomains for a target domain",
+                "10. Web Directory Fuzzer - Check common web paths and endpoints",
+                "11. HTTP Header Inspector - View headers and audit security headers",
+                "12. Packet Sniffer - Capture and summarize live raw IP packets",
+                "13. SSL/TLS Inspector - Read certificate issuer, validity, and SANs",
+                "14. RDAP / WHOIS Lookup - Fetch domain registration intelligence",
+                "15. Traceroute - Trace network path hops to a target",
+                "16. Interfaces & ARP - Show local adapters and ARP/neighbor table",
+                "17. DNS Record Lookup - Query A, AAAA, MX, NS, TXT, SOA, and CNAME",
+                "18. HTTP Status Checker - Show status, redirects, timing, and server info",
+                "19. TCP Ping - Measure TCP connection latency to a host and port",
+                "20. Listening Ports - List local services listening on network ports",
+                "21. Tech Stack Detector - Fingerprint web frameworks, CDN/WAF, and cookies",
+                "22. Web Endpoint Auditor - Check common web metadata and exposure paths",
+                "0. Exit - Close Super Toolkit",
+            ]
+            choice = questionary.select(
+                "Select a Tool to Launch:",
+                choices=options,
+                pointer="▶ ",
+                style=MENU_STYLE
+            ).ask()
+
+            if choice and choice.startswith("0."):
+                clear_screen()
+                console.print(Panel("[bold green]Thank you for using Super Toolkit. Stay safe & secure![/bold green]", border_style="cyan"))
+                break
+
+            if not choice or "0.  🚪 Exit" in choice:
+                clear_screen()
+                console.print(Panel("[bold green]Thank you for using Super Toolkit. Stay safe & secure![/bold green]", border_style="cyan"))
+                break
+            
+            if "1.  🔑" in choice: password_generator()
+            elif "2.  🔒" in choice: hash_tool()
+            elif "3.  📡" in choice: my_network_info()
+            elif "4.  🌐" in choice: target_ip_lookup()
+            elif "5.  🌍" in choice: geoip_lookup()
+            elif "6.  🏷️" in choice: mac_lookup()
+            elif "7.  🖧" in choice: subnet_scanner()
+            elif "8.  ⚡" in choice: port_scanner()
+            elif "9.  🕵️" in choice: subdomain_finder()
+            elif "10. 📁" in choice: dir_fuzzer()
+            elif "11. 🔍" in choice: header_inspector()
+            elif "12. 🦈" in choice: packet_sniffer()
+            elif "13. 📜" in choice: ssl_inspector()
+            elif "14. 🕸️" in choice: whois_lookup()
+            elif "15. 🛤️" in choice: traceroute_tool()
+            elif "16. 📡" in choice: network_interfaces()
+
+            menu_tools = {
+                "1.": password_generator,
+                "2.": hash_tool,
+                "3.": my_network_info,
+                "4.": target_ip_lookup,
+                "5.": geoip_lookup,
+                "6.": mac_lookup,
+                "7.": subnet_scanner,
+                "8.": port_scanner,
+                "9.": subdomain_finder,
+                "10.": dir_fuzzer,
+                "11.": header_inspector,
+                "12.": packet_sniffer,
+                "13.": ssl_inspector,
+                "14.": whois_lookup,
+                "15.": traceroute_tool,
+                "16.": network_interfaces,
+                "17.": dns_record_lookup,
+                "18.": http_status_checker,
+                "19.": tcp_ping_tool,
+                "20.": listening_ports,
+                "21.": tech_stack_detector,
+                "22.": web_endpoint_auditor,
+            }
+            for prefix, tool_func in sorted(menu_tools.items(), key=lambda item: len(item[0]), reverse=True):
+                if choice.startswith(prefix):
+                    tool_func()
+                    break
+
+        except (KeyboardInterrupt, EOFError):
+            clear_screen()
+            console.print("[bold red]\nOperation interrupted. Exiting...[/bold red]")
+            break
+        except Exception as e:
+            console.print(f"[bold red]\nUnexpected error: {e}[/bold red]")
+            pause()
+
+if __name__ == "__main__":
+    main()