A comprehensive security application providing real-time system monitoring, malware scanning, file encryption, firewall management, and VPN integration.

• Memory Scanner:

  • Scans active processes for known malicious hashes
  • Real-time scanning with progress updates via SSE

• File Scanner:

  • Full system/custom path scanning
  • Malware detection using hash database
  • Queue-based scanning with start/stop control

• Task Manager:

  • Real-time system monitoring (CPU, disk I/O)
  • Process list with resource usage
  • Server-Sent Events (SSE) for live updates

• File Locker:

  • AES file encryption/decryption
  • Password-protected files
  • Bulk operations and database cleanup

• Firewall Manager:

  • IP/Port blocking
  • Rule management (create/remove)
  • Active rule monitoring

• VPN Client:

  • OpenVPN profile management
  • Connection status monitoring

Real-time system resource monitoring component for process and performance tracking.

• Real-time Process Monitoring

  • CPU percentage per process
  • Disk I/O rates (read/write)
  • Process prioritization by resource usage

• Power Consumption Analysis

  • CPU-based power categorization
  • 5-tier classification system
  • Process-level energy impact estimation

• System-wide Metrics

  • Total CPU utilization
  • Aggregate disk throughput
  • Historical data tracking (last 60 seconds)

Main monitoring function that:

1. Calculates disk I/O rates (MB/s)
2. Measures CPU utilization across all cores
3. Tracks per-process resource consumption
4. Maintains historical data for trend analysis

Malware detection component that scans running processes' executables against known malicious hashes.

• Process Memory Scanning

  • Real-time executable hash verification
  • Malicious/Clean status classification
  • Process metadata collection (PID, name, path)

• Hash Database Integration

  • SQLite database connection
  • MD5 hash verification
  • Set-based hash lookup for O(1) complexity

• Error Handling

  • Process access exceptions handling
  • File I/O error protection
  • Database connection safeguards

• Establishes SQLite connection
• Parameters:
  • db_path: Path to SQLite database file
• Returns: Connection object or None

• Retrieves malicious hashes
• Parameters:
  • conn: Active database connection
• Returns: Set of MD5 hashes

• Generates file MD5 checksum
• Parameters:
  • file_path: Path to executable
• Returns: Hexadecimal hash string or None

• Main scanning generator function
• Parameters:
  • known_hashes: Set of malicious hashes
• Yields: Tuple containing:
  • Total scanned count
  • Malicious count
  • Clean count
  • Process metadata dict

graph TD
    A[Process Executable] --> B{File Accessible?}
    B -->|Yes| C[Calculate HASH Code]
    B -->|No| D[Skip Process]
    C --> E{Hash in Database?}
    E -->|Yes| F[Mark Malicious]
    E -->|No| G[Mark Clean]

Malware detection component that scans filesystem entries against known malicious hashes with progress tracking.

• Multi-mode Scanning

  • Single file verification
  • Recursive directory scanning
  • Custom path handling

• Performance Optimizations

  • Progressive result yielding
  • Files/second speed calculation
  • Adaptive progress updates (0.5s or 100 files)

• Comprehensive Reporting

  • Malicious file cataloging
  • Skip count tracking (permission issues)
  • Real-time statistics dashboard

Core scanning generator that:

• Handles both files and directories
• Implements adaptive progress reporting
• Maintains scan statistics
• Yields updates containing:
  • Scan status
  • Count metrics
  • Malicious file list
  • Performance data
• Thread-safe MD5 hashing
• 4KB block reading for large files
• Error-resistant file handling

graph TD
    A[Start Scan] --> B{Is File?}
    B -->|Yes| C[Single File Hash]
    B -->|No| D[Recursive Directory Walk]
    C/D --> E[Hash Calculation]
    E --> F{Hash in DB?}
    F -->|Yes| G[Mark Malicious]
    F -->|No| H[Mark Clean]
    G/H --> I[Update Metrics]
    I --> J{Update Interval?}
    J -->|Yes| K[Yield Progress]
    J -->|No| L[Continue Scanning]
    K --> L
    L --> M{Complete?}
    M -->|Yes| N[Final Report]

Windows firewall management component with direct registry access and PowerShell integration.

• Rule Management

  • IP address blocking (IPv4/IPv6)
  • Port/protocol blocking (TCP/UDP)
  • Rule deletion by display name
  • Direction control (Inbound/Outbound)

• Advanced Monitoring

  • Direct Windows Registry parsing
  • Profile detection (Domain/Private/Public)
  • Active rule type identification
  • Protocol translation (6=TCP, 17=UDP)

• PowerShell Integration

  • Safe command execution
  • Error capturing
  • Asynchronous rule application

Registry-based rule parser that:

• Accesses HKEY_LOCAL_MACHINE\SYSTEM\...\FirewallRules
• Decodes complex rule structures
• Identifies IP/Port-based rules

Returns tuple:

1. Rules list with columns: [DisplayName, Direction, Action, Enabled, Profile]
2. Table headers
3. Active rules dictionary with metadata

Secure file encryption/decryption system with database-backed management and cryptographic best practices.

• Military-Grade Encryption

  • AES-256-CBC via Fernet
  • PBKDF2HMAC key derivation (100k iterations)
  • Per-file cryptographic salts
  • Secure salt storage (first 16 bytes of file)

• Database Management

  • Automatic directory synchronization
  • File metadata tracking:
    • Original filename
    • File extension
    • Encryption status
    • File size
    • Creation timestamp
  • Orphaned entry cleanup

• Operations

  • Single-file encrypt/decrypt
  • Bulk re-encryption
  • Database integrity checks
  • Manual file reconciliation

VPN Client	Proof

OpenVPN connection manager with automated status monitoring and process management.

• Connection Management

  • Profile-based VPN connections
  • Background process monitoring
  • Multi-threaded status updates
  • Forceful process cleanup

• Advanced Monitoring

  • Log file analysis for connection verification
  • Real-time status tracking (Connecting/Connected/Disconnected)
  • Active connection persistence

• Windows Integration

  • Native OpenVPN binary support
  • Process tree termination
  • System service interaction

graph TD
    A[Start] --> B[Terminate Existing]
    B --> C[Launch OpenVPN Process]
    C --> D[Start Monitoring Thread]
    D --> E{Log Analysis}
    E -->|Success| F[Set Connected]
    E -->|Timeout| G[Set Error]

• Graceful process termination
• Force kill remaining OpenVPN processes
• Thread cleanup
• State reset

• Returns real-time connection state:
  • Connected
  • Connecting
  • Disconnected
  • Error

This guide explains how to clone and run the Yuusha Advanced Protection Suite Flask application on your local machine.

Use Git to clone the repository:

git clone https://github.com/CarbezonKARDE/Yuusha-AdvancedProtectionSuite.git
cd Yuusha-AdvancedProtectionSuite

Install all dependencies listed in the requirements.txt file:

pip install -r requirements.txt

🔐 Important: You must run the app with administrator privileges for full functionality (e.g., firewall control).

On Windows:

1. Open Command Prompt or PowerShell as Administrator.
2. Navigate to the project directory.
3. Run the Flask app:

python app.py

By default, the app runs at: 🔗 http://127.0.0.1:5000

Your Flask-based Advanced Protection Suite is now up and running!

Make sure to test features like firewall rules and admin-only tools with elevated permissions.