OsteenK/Angalizi

Network vulnerability scanner CLI tool — Swahili for watchman # Angalizi **Network Vulnerability Scanner** — *Swahili for "watchman"* A Python CLI tool that scans networks, detects vulnerabilities (CVEs), and provides actionable remediation advice. Built on top of nmap with Rich terminal output. ``` _ _ _ _ / \ _ __ __ _ __ _| (_)___(_) / _ \ | '_ \ / _` |/ _` | | |_ / | / ___ \| | | | (_| | (_| | | |/ /| | /_/ \_\_| |_|\__, |\__,_|_|_/___|_| |___/ Network Vulnerability Scanner v0.1.0 ``` ## What It Does Angalizi runs a 3-stage pipeline on any target you point it at: 1. **Scan** — Discovers hosts and open ports using nmap, detects running services and versions 2. **Detect** — Extracts CVE vulnerabilities from nmap's vulners NSE script output with CVSS severity scores 3. **Advise** — Maps detected CVEs and services to a local remediation database with prioritized fix steps ## How It Differs From Netcheck | | Angalizi | Netcheck | |---|---|---| | **Language** | Python | Bash | | **Purpose** | Vulnerability scanning (CVEs, CVSS scores, fix advice) | Network diagnostics (interface health, WiFi, ARP spoofing) | | **Engine** | nmap + vulners NSE | Direct system commands | | **Output** | Severity-colored tables, JSON export | Colored terminal output | | **Scope** | Scan any target (IP, CIDR, hostname) | Local machine diagnostics | ## Features - **4 Scan Profiles** — Quick, Standard, Deep, and Stealth with conservative timing defaults - **Vulnerability Detection** — Parses nmap vulners NSE script output for CVEs with CVSS scores - **NVD Enrichment** — Optional CVE description lookup via NIST NVD API 2.0 - **Remediation Engine** — Local YAML database mapping CVEs and services to fix steps, grouped by effort level (Quick Wins / Moderate / Architecture Changes) - **Rich Terminal Output** — Severity-colored vulnerability tables, host/port tables, scan summaries - **JSON Export** — Full scan results exportable for reporting or integration - **Legal Safeguards** — Mandatory authorization gate before …