PenTool Kit

Command-line architecture built around an argparse dispatcher, centralized authorization gate, shared target and port parsers, and independent scanner modules. Each module produces findings through a common report model containing severity, category, target, technical details, and structured metadata. Network scanning uses portable TCP connect operations rather than raw sockets, allowing the toolkit to run without administrator or root privileges. External services such as crt.sh certificate-transparency logs and the National Vulnerability Database are strictly opt-in, keeping the default execution path local and predictable. Reports are normalized through a shared export layer supporting JSON, HTML, Markdown, and CSV. The project is designed for extensibility, allowing additional scanners, enrichment providers, report formats, and defensive validation checks to be added without modifying the core command-dispatch workflow.