Web Analyzer for private Networks

In the current digital landscape, real-time monitoring and assessment of network domain safetyare essential for proactive cybersecurity defense. This project introduces a Python-based live domainsafety monitoring tool that leverages network packet analysis to evaluate and visualize the securityposture of domains accessed within a network. The tool integrates the power of tshark, the command-lineinterface of Wireshark, to capture live DNS, HTTP, and SSL/TLS traffic, extracting relevant protocol anddomain information for immediate analysis.At the core of the system is a dynamic scoring mechanism that assigns and adjusts safety scores to eachdetected domain. Domains are initially assigned a neutral score, which is then modified based on a set ofheuristic rules. For instance, domains with suspicious characteristics—such as those starting with"malware" or containing the substring "phish"—are penalized, reflecting their higher likelihood of beingmalicious. The tool also evaluates the security of the communication protocol: traffic over HTTP results inscore deductions due to its inherent insecurity, while HTTPS and SSH connections are rewarded for theirstronger security guarantees. This flexible scoring approach allows the system to adapt to evolving threatpatterns and user behavior.To further enhance situational awareness, the tool incorporates a Man-in-the-Middle (MITM) riskassessment for each domain. By considering both the protocol in use and the domain’s current safetyscore, the system categorizes MITM risk as High, Medium, or Low. Domains accessed via insecureprotocols, those with low safety scores, or those containing phishing indicators are flagged as high risk,enabling rapid identification of potential attack vectors.Visualization is a key feature of the tool, achieved through the rich Python library. The console interfacedisplays a continuously updating table of observed domains, their protocols, safety scores, and MITM risks,all color-coded for quick interpretation. This real-time feedback loop empowers network administratorsand security analysts to take immediate action in response to emerging threats, such as isolatingcompromised hosts or blocking access to dangerous domains