Created by TheCyber_Ninja
🛡️ A stealth process scanner for Linux/Windows that detects and helps neutralize malware, payloads, backdoors, and suspicious activity.
⚠️ For educational and authorized testing only.
- ✅ Detects suspicious processes using:
- Dangerous keywords (e.g., reverse shell, RAT, stealer, etc.)
- Suspicious file paths (
/tmp,AppData, etc.) - Network activity
- Unusual CPU or memory usage
- 🧠 Intelligent process threat scoring
- 🎨 Colorful and interactive terminal UI
- ☠️ Option to safely terminate malicious processes
- 🧪 Perfect for blue teamers, analysts, and ethical hackers
Clone the repo and install the dependencies:
git clone https://github.com/EvilmaxSec/Spy_Ninja.git
cd Spy_Ninja
pip install -r requirements.txt
If you see the “externally-managed-environment” error when installing, it means your system is protecting its Python packages. Please install this tool inside a virtual environment by running:
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txtRun the script using Python 3:
python3 spyNinja.pyYou’ll see a list of suspicious processes. The tool will prompt you to:
🔍 View details
❌ Kill the process by PID
🚪 Exit safely
This project is licensed under the MIT License. See the
This tool is provided for educational purposes only. Use it only in environments you own or have explicit permission to test.
🛡️ Stay safe. Stay legal. Think like an attacker. Act like a defender.
