kharma-radar 10.1.2

The Over-Watch Network Monitor: An elite CLI tool mapping active connections to process IDs, geographical locations, and threat intelligence.

Kharma_Radar

The Over-Watch Network Monitor

An elite cybersecurity CLI & Full-Stack Web tool that maps active connections to process IDs, geographical locations, and global threat intelligence feeds in real-time.

---

👁️ What is Kharma?

Traditional network monitoring on Linux/Windows requires manually chaining netstat, grep, lsof, and external IP checkers. This is slow and tedious during an incident response.

Kharma acts as an all-seeing eye for your operating system. It provides a stunning, high-performance radar that intercepts outbound connections, unmasks the executable initiating the socket, runs the file against 70+ Anti-Virus engines in the cloud, and plots the destination IP on a map—all updated every 2 seconds.

---

🔥 Elite Features

• 🌐 Web UI Dashboard (New in v5.0): Spawns a hidden Flask backend serving a beautiful, dark-themed HTML/JS Dashboard. View live connections, Geo-locations, and kill malware right from your browser.
• 🦠 Enterprise EDR (VirusTotal): Natively extracts the physical binary path of connected processes (.exe / ELF), computes its SHA-256 hash locally, and verifies it against VirusTotal limits.
• ⚔️ Active Defense (Auto-Kill IPS): Instantly terminates any process the millisecond it initiates a connection to a known malicious IP (Firehol blocklist) or a flagged binary hash.
• 📡 Offline Geo-IP Engine: Built-in MaxMind GeoLite2 database ensures 0ms lag when resolving IP coordinates. No external rate limits, 100% privacy.
• 🗄️ Time Machine Logger: Silently records all established connections to a local SQLite database (~/.kharma/kharma_history.db) for post-incident forensics.
• 🤖 Background Daemon & Telegram Alerts: Run kharma daemon start to deploy a headless background worker that watches traffic quietly and pushes critical breach alerts dynamically to Telegram.

---

🚀 Installation

Option 1: Install via PyPI (Recommended for Python Users)

pip install kharma-radar

Option 2: Standalone Windows Executable

Don't have Python? Download the pre-compiled kharma.exe from the Releases tab and run it anywhere. Zero dependencies required.

---

💻 Quick Start Guide

Kharma is an intelligent CLI that relies on the incredibly styled rich-click interface. Run kharma --help at any time.

Command	Description
kharma run	Start the Live Network Radar Dashboard in the Terminal.
kharma run --protect	Start Dashboard + Auto-Kill Malware (Active Defense).
kharma web	Launch the Dark Web UI Dashboard (Localhost).
kharma daemon start	Deploy the silent Background Monitor.
kharma history	View historical connections (Time Machine).
kharma config vt <KEY>	Register a free VirusTotal API Key for advanced EDR.

🌍 The Web UI Dashboard

Get the ultimate Full-Stack experience visually tracking your network:

root@linux:~# kharma web --port 8080
[*] Initializing Kharma Web Dashboard...
[*] Spawning background data scanner loop...
[*] Dashboard launched at: http://127.0.0.1:8080

(Simply open your browser to the URL and watch the data flow!)

---

🏗️ Architecture

Kharma is designed for maximum performance, minimal dependencies, and absolute oversight.

• Frontend: rich (Terminal TUI) & Tailwind.css + JavaScript (Web UI).
• Backend Core: psutil (Socket Hooks), Flask (REST API).
• Persistence: Local SQLite for logging and .mmdb for GeoIP lookups.

---

🛡️ Disclaimer

Kharma is developed strictly for educational purposes, system administration, and defensive cybersecurity operations. The author is not responsible for any misuse or damage caused by terminating critical system processes via the Auto-Kill features.

Developed by Mutasem
Cybersecurity & Software Engineer