KaliDash

Overview

KaliDash turns a Kali Linux machine into a remote-controlled home lab security platform. The app runs on Windows, connects to a Kali Linux box over SSH using Paramiko, deploys a library of bash scripts, and executes them on demand — streaming results back in real time.

The project grew out of a simple idea: a single GUI for all the wireless and network security tools you'd want in a home lab, without needing to remember every flag and syntax. Every scan, capture, and crack is one click away.

Four persistent intelligence maps — WiFi, Network, RF, and Aircraft — build up over time into a comprehensive record of every device, network, and signal you've observed in your environment.

127 Bash Scripts

23 Python Modules

7 Tool Domains

4 Intel Maps

What It Does

📶

WiFi Recon

Passive AP discovery — airodump-ng, no deauth needed
PMKID + EAPOL handshake capture via hcxdumptool
Kismet IDS — detects rogue APs and deauth attacks
WPS scan — version, lock status, vendor per AP
Hidden SSID reveal from probe/assoc responses
802.11k/v/r roaming topology extraction
Auto-parse timer — background Kismet hash import

🌐

Network Scanning

ARP sweep — finds every live host by MAC
nmap ping sweep + reverse DNS
Quick service sweep — top 100 TCP ports across subnet
OS fingerprinting via TCP/IP stack analysis
UDP top ports — SNMP, DNS, NTP, NetBIOS, SSDP
DNS recon — AXFR zone transfer + MX/NS/TXT/SOA
Kali box status — uptime, RAM, disk, interfaces

📻

Radio / SDR

RTL-SDR dongle — 24 MHz to 1.766 GHz
Live audio stream to Windows via rtl_fm + socat
Modes: WBFM, FM, AM, USB, LSB
Band scanner with right-click → tune or log to RF Intel
Decoders: FM RDS, POCSAG pager, VOR nav, rtl_433 ISM
Presets: FM Radio, ATC 118, PMR446, ISM 433, Pager
RF Intel scan — continuous multi-band sweep to intel map

✈️

Aircraft / ADS-B

Passive ADS-B receive at 1090 MHz via dump1090
Live table: callsign, ICAO, altitude, speed, squawk
Emergency squawk alerts — 7500 / 7600 / 7700
ICAO database lookup for airline and aircraft type
Stale detection — removed after 300s of silence
Live "X active / Y total" aircraft counter

🔍

OSINT

WHOIS — registrant, registrar, nameservers
IP geolocation — country, city, ISP, coordinates
Subdomain enum — DNS + crt.sh certificate logs
Web fingerprinting via whatweb
Email harvesting via theHarvester
Username search via sherlock
Intel window: Overview / Emails / Hosts / Profiles / Tech / Dorks

🍯

Honeypot AP

Rogue WiFi AP via hostapd + dnsmasq
Client sidebar — IP, MAC, hostname, vendor, live updates
DNS query log + DHCP event log
HTTP request log — GET/POST/headers/User-Agent
Per-client nmap scan and 30s tcpdump capture
Kick client, pivot to Network Intel
Uptime clock + MITM proxy toggle

🔑

Cracking Tools

WPA dictionary attack via aircrack-ng
WPA2 hashcat mode 22000 — PMKID + EAPOL
Sky Broadband default key derivation (SHA1 from SSID)
BT Hub mask attack — uppercase + digits
WPS Pixie Dust + PIN brute via reaver
SSID mutation wordlist generation

🗺️

Intel Maps

WiFi Intel — every AP ever seen, captures, hashes, alerts
Network Intel — every LAN device, ports, services, notes
RF Intel — every signal seen, frequency, strength, type
Aircraft Intel — live in-memory flight tracking
Maps persist to JSON between sessions
Click RF signal → radio tab tunes to that frequency
Pivot honeypot clients → Network Intel

Tech Stack

Python 3 + TkinterAll UI — dark-themed desktop GUI on Windows

ParamikoSSH connection to home lab Kali box

aircrack-ng suiteMonitor mode, airodump-ng, WPA cracking

hcxdumptoolPassive PMKID + EAPOL capture, all channels

hashcatGPU-accelerated hash cracking (mode 22000)

KismetContinuous wireless IDS, pcapng logging

nmapHost discovery, port scanning, OS fingerprinting

RTL-SDR / rtl_fmSoftware-defined radio, 24 MHz – 1.766 GHz

dump1090ADS-B receiver and decoder at 1090 MHz

hostapd + dnsmasqRogue AP creation and DHCP/DNS serving

theHarvester / sherlockEmail + username OSINT gathering

JSON filesPersistent intel maps — wifi, network, rf, config

Architecture

How It's Built

KaliDash runs entirely on Windows. Each tab has its own SSH channel — multiple operations run in parallel as long as they don't compete for the same hardware. The WiFi card and SDR dongle each handle one operation at a time; everything else can stack.

Results stream back line by line from the Kali box, parsed in real time and fed into the relevant intel map. The four maps persist to JSON between sessions and build up over time — every scan adds to the picture.

The 127 bash scripts live in ~/kali-scripts/ on the Kali box. The Python side deploys them on connect, then calls them by name. All complexity — flags, paths, parsing — lives in the scripts. The GUI just fires them and reads stdout.

FILE STRUCTURE

kalidash/
  main.py           ← entry point
  ssh_client.py     ← Paramiko wrapper
  gui modules (21)
    wifi_tab.py
    network_tab.py
    radio_tab.py
    adsb_tab.py
    osint_tab.py
    honeypot_tab.py
    crack_tab.py
    wifi_intel.py
    network_intel.py
    rf_intel.py
    aircraft_intel.py
    osint_intel.py
    ...
  data/
    wifi_map.json
    network_map.json
    rf_intel.json
    config.json
  ~/kali-scripts/   ← on Kali box
    (127 bash scripts)