axumweyane/HAKA-AI

🦞 AI-powered cybersecurity assessment platform for Ethiopian financial sector. 11 scanners, 5 AI tools, mobile APK analysis, NBE compliance mapping. # HAKA AI — Ethiopian Financial Sector Security Assessment Platform AI-powered cybersecurity assessment platform for auditing Ethiopian financial institutions and telecoms. Combines automated scanners, AI-driven report generation, threat intelligence, compliance mapping, and business operations tools. **7 targets analyzed · 137 findings (57 CRITICAL, 87 HIGH) · 10+ tools** --- ## Quick Start ```bash # 1. Install dependencies pip install -r requirements.txt # 2. Pull a model (pick one) ollama pull qwen3:32b # 20 GB — best quality ollama pull deepseek-r1:7b # 4.7 GB — fast # 3. Run a scan python3 scanners/haka_email_scanner.py --domain cbe.com.et # 4. Generate a report python3 haka_ai_reporter.py --input reports/haka_consolidated_cbe.json --mode executive # 5. Chat with findings python3 haka_chat.py -q "show me critical findings at CBE" # 6. Build attack paths python3 haka_attack_paths.py --target cbe # 7. Run compliance mapping python3 haka_compliance.py --target cbe --framework nbe # 8. Manage client pipeline python3 haka_crm.py --pipeline ``` --- ## Tool Inventory ### Scanners (`scanners/`) Automated security assessment tools that probe targets and produce structured JSON output. | Tool | Description | Key Capabilities | |------|-------------|-----------------| | `haka_exchange_scanner.py` | Exchange server security | OWA exposure, EWS enumeration, version detection, auth assessment | | `haka_email_scanner.py` | Email security posture | SPF/DKIM/DMARC validation, MX enumeration, STARTTLS checking | | `haka_dns_scanner.py` | DNS infrastructure | Zone transfer attempt, DNSSEC validation, subdomain enumeration | | `haka_tls_scanner.py` | TLS/SSL assessment | Cipher suite analysis, certificate validation, protocol version checks | | `haka_web_scanner.py` | Web application scan | Header analysis, cookie security, clickjacking, CSP validation | | `haka_s3_scanner.py` | S3 bucket audit | Public exposure, ACL analysis, encryption status | | ` …