The Advanced Network Security Tool is a Bash script that provides an interactive, menu-driven interface for common penetration testing tasks. It brings together tools like nmap, masscan, tcpdump, ettercap, aircrack-ng, and hashcat into one place, making it easier to perform network scanning, sniffing, MITM testing, wireless attacks, and password audits on authorized networks.
Warning: This tool is intended only for authorized security testing on networks you own or have explicit permission to test. Unauthorized access, disruption, or interception of networks or devices is illegal and unethical. Read the Security & Legal section below before using.
- Project overview
- Features
- Prerequisites / Dependencies
- Installation
- Usage
- Configuration notes
- Security & legal / Responsible use
- Troubleshooting
- Contributing
- License
This repository contains a single-file Bash toolkit that provides a menu-driven interface for common network security testing tasks. It aggregates calls to many well-known open-source network/security tools and wraps them into an interactive CLI menu so authorized testers can run scans, captures, and assessments from one place.
The script is not an automated exploit tool — it is a wrapper that helps launch and manage various legitimate security utilities installed on your system.
High-level features implemented by the script:
- Interactive, colorized main menu and sub-menus
- Network sniffing / packet capture options (tcpdump, tshark, Wireshark)
- Port scanning (nmap, masscan) with quick/comprehensive/stealth modes
- Vulnerability assessment helpers (nmap scripts, nikto, OWASP ZAP)
- MITM (man-in-the-middle) helpers (bettercap, ettercap, arpspoof, sslstrip)
- DNS spoofing helpers (dnschef, ettercap DNS plugin)
- Wireless actions (monitor mode helper, deauthentication, handshake capture, WPS testing)
- Password cracking helpers (John the Ripper, Hashcat, crunch)
- Built-in checks to detect if required tools are present and to offer installation
- Graceful start/stop handling for long-running background processes
Note: The script only invokes the listed tools — the actual behavior depends on those external programs.
This repository does not bundle third-party tools. The script expects standard Linux security tools to be available on the host. Common dependencies (one or more of these) include:
nmapmasscantcpdumptshark/wiresharkaircrack-ng(includesairmon-ng,airodump-ng,aireplay-ng)mdk4reaverbettercapettercapdnschefsslstripniktozap-cli(OWASP ZAP CLI)john(John the Ripper)hashcatcrunchiptables/sysctl(system utilities)sudo(script runs elevated commands)
Install only the packages you need and ensure you understand their usage and local laws before running them.
- Place the script file in your project/repo directory (for example
anst.sh). - Make it executable:
chmod +x anst.sh- Run it with appropriate privileges (many operations require root):
sudo ./anst.shRunning with
sudois required for many network interfaces, monitor mode, and packet-capture functionality.
The script provides an interactive menu. Major menu items are:
- Network Sniffing — packet capture and analysis using tcpdump/tshark/Wireshark.
- Port Scanning — quick/comprehensive/stealth/version scans using nmap; use masscan for very fast scans.
- Vulnerability Assessment — nmap vulnerability scripts, web scans via nikto and OWASP ZAP.
- MITM Attacks — tools for authorized MITM testing (Bettercap, Ettercap, ARP spoofing, SSL stripping).
- DNS Spoofing — DNS redirection helpers (dnschef, Ettercap DNS).
- Wireless Attacks — deauthentication, handshake capture and WPS testing (requires wireless adapter capable of monitor mode).
- Password Attacks — hash cracking helpers (John, Hashcat) and wordlist generation (crunch).
High-level run flow
- Launch the script as root (or with
sudo) from a terminal. - Pick the desired main menu option, then a sub-option.
- Follow the prompts to provide a target, interface, or filenames as requested by the script.
- The script attempts to detect missing tools and will prompt to install or abort those subroutines.
Important: The script intentionally leaves many operational choices to the tester (target IPs, interfaces, channels, etc.). Always confirm authorization and scope before beginning any test.
- The script may attempt to put wireless interfaces into monitor mode. Ensure you have a compatible adapter and understand the effects (networking may be disrupted).
- Some sub-commands run background processes; the script tracks PIDs in order to terminate them when you choose to stop an action.
- The script uses standard Linux utilities like
sysctlandiptablesfor certain workflows — modifying these may affect system networking. - For consistent behavior, test on an isolated lab network or VM before using on production devices.
This repository contains tools and helpers often used in penetration testing. Before using any of these features you must:
- Have explicit, written permission from the network owner for the scope of testing.
- Understand and comply with local laws and organizational policies.
- Avoid tests that could cause unintended service interruptions on production networks without prior coordination.
- Use isolated environments or lab networks for learning/testing whenever possible.
The author and repository maintainers are not responsible for misuse. Use at your own risk.
- Missing tool errors: Install the required package for the tool indicated by the script (package names vary by distribution).
- Permission/privilege issues: Re-run the script with
sudoif an operation fails due to permissions. - Wireless interface not entering monitor mode: Ensure
aircrack-ngis installed and no network manager processes are interfering; check that your adapter supports monitor mode. - Captures not containing expected traffic: Verify interface selection, channel, BSSID, and that monitor mode is active.
Contributions are welcome for documentation, bug fixes, and safer usability improvements. If you submit changes, please:
- Focus on clarity of prompts and safety checks.
- Add clear README updates for any new feature.
- Avoid adding automated offensive actions; prefer helpers and safe guardrails.
- This script is a wrapper that invokes many standard open-source security tools. See those individual projects for license and attribution.
A permissive license is recommended (e.g., MIT). Example placeholder:
MIT License
Copyright (c) <year> <author>
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, subject to the following conditions: ...