Windows-Security - Security Tool is a defensive Windows security appl

项目说明

Security Tool

Security Tool is a defensi security application focused on safe static analysis, malware detection workflows, quarantine, and reporting. The project is intentionally structured to keep platform-independent logic reusable for future Linux and cross-platform ports.

Phase 1: Project architecture and de en

This phase establishes the baseline structure and toolchain for the project. The goal is to define a clean architecture before implementing scanner, detection, PE analysis, quarantine, and UI features.

Repository structure

security_tool/ — main application package

- app/ — application services and feature modules
- core/ — shared domain logic and abstractions
- scanner/ — file scanning workflows
- detection/ — malware detection rules and statuses
- hashing/ — hash utilities
- pe_analyzer/ — static PE inspection modules
- quarantine/ — quarantining and restoration logic
- passwords/ — secure password generation
- history/ — scan history persistence and query logic
- reports/ — result exporting and reporting
- ui/ — UI and presentation layer
- platform/ — platform adapters and runtime-specific code

tests/ — automated tests

config/ — configuration samples and deployment settings

docs/ — architecture and engineering notes

Design principles

Separate platform-independent logic from Windows-specific code.

Keep the detection engine modular and explainable.

Ne analyzed files during static inspection.

Use cryptographically secure randomness for password generation.

Prefer explicit data models o global state.

Roadmap

1. Phase 1 — Project architecture and de en
2. Phase 2 — Basic UI
3. Phase 3 — File scanner
4. Phase 4 — SHA-256 hashing
5. Phase 5 — Detection engine
6. Phase 6 — Static PE analysis
7. Phase 7 — Quarantine
8. Phase 8 — Scan history
9. Phase 9 — Reports
10. Phase 10 — Password generator
11. Phase 11 — Security Lab
12. Phase 12 — Security testing
13. Phase 13 — Performance optimization
14. Phase 14 — Windows packaging as .exe
15. Phase 15 — Final security review

Security posture

This project is designed for legitimate defensive use only. It does not include offensi capabilities, credential theft, persistence, or unauthorized access workflows.

Local de

The project is configured for Python-based de and pytest-based testing.

Easter egg video

You can add a hidden easter-egg video by placing one video file into
security_tool/assets/easter_egg/ (supported: .mp4, .mkv, .webm, .avi, .mov).

Run it from Python:

Or, in code, call the UI shell helper:

Embedded player notes:

Use --play-easter-egg-embedded to prefer the built-in player (no external

application). Example:

The embedded player uses OpenCV to display frames and does not play audio.

If no supported video is found (extensions: .mp4, .mkv, .webm, .avi, .mov)

the command exits with an error.

Install provided video
- If you have a video file (for example the one you attached), copy it into
the assets folder with the helper script:

- After copying, play it with the embedded player:

Project status: this repository now includes the easter-egg feature and an
embedded player; drop your video with the script above to finish setup.

GUI demo
- A minimal Tkinter demo provides a button labeled "???" that will
launch the easter-egg video when clicked. To run it:

- The GUI runs the playback on a background thread; if the embedded player
is una it will fallback to the system opener. The embedded player
does not play audio.

Full-featured player (PySide6)
- A richer player with audio and media controls is a if PySide6 is
installed. scripts/run_gui.py will try to launch the PySide6 player first
and fall back to the Tkinter demo if PySide6 is missing.

To run the Qt player (preferred if you want audio):

If you prefer to force the simple Tkinter demo, run:

```

项目信息

开发语言：Python

Star 数：2

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Security Tool is a defensive Windows security application for safe file scanning, static PE analysis, hash verification, quarantine, reporting, and security testing. Built with a modular architecture for future cross-platform reuse.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。