Updates

README.md

@@ -1,4 +1,4 @@
-## ShadowScan
+## ShadowScan (Under development)
 
 #### Overview
 ShadowScan is a security tool designed to scan files and system configurations for hidden backdoors, malicious scripts, and reverse shells on Linux and macOS.

src/report.py

@@ -0,0 +1,7 @@
+import json
+
+def generate_report(scan_results, output_file):
+    """Generates a report from the scan results and saves it to a JSON file."""
+    with open(output_file, 'w') as report_file:
+        json.dump(scan_results, report_file, indent=4)
+    print(f"Report saved to {output_file}")

src/rules.json

@@ -1,6 +1,8 @@
-# rules.json
-[
-    {"pattern": "nc -e", "description": "Potential reverse shell using netcat"},
-    {"pattern": "bash -i", "description": "Bash interactive shell - possible backdoor"},
-    {"pattern": "import pty", "description": "Python reverse shell detected"}
-]
+{
+    "suspicious_keywords": [
+        "malware",
+        "backdoor",
+        "trojan",
+        "spyware"
+    ]
+}

src/shadowscan.py

@@ -1,8 +1,12 @@
-# shadowscan.py
-import argparse
+import sys
 import os
+
+# Add the src directory to sys.path for module imports
+sys.path.insert(0, os.path.abspath(os.path.dirname(__file__)))
+
+import argparse
 from scanner import scan_directory
-from report import generate_report
+from report import generate_report  # This will now look for the report.py file in the src folder
 
 def main():
     parser = argparse.ArgumentParser(description="ShadowScan - Detect hidden backdoors and malicious scripts.")
@@ -19,4 +23,4 @@ def main():
         print(scan_results)
 
 if __name__ == "__main__":
-    main()
+    main()

src/utils.py

@@ -1,14 +1,14 @@
-# utils.py
 import json
 
 def load_rules():
-    with open("rules.json", "r") as f:
-        return json.load(f)
+    with open('rules.json', 'r') as f:
+        rules = json.load(f)
+    return rules
 
 def detect_suspicious_patterns(content):
     rules = load_rules()
-    matches = []
-    for rule in rules:
-        if rule["pattern"] in content:
-            matches.append(rule)
-    return matches
+    suspicious_patterns = []
+    for rule in rules['suspicious_keywords']:
+        if rule in content:
+            suspicious_patterns.append(rule)
+    return suspicious_patterns