import re
import random
import logging

# CYBERDUDEBIVASH UPI Hardener v1.0 – Phishing Checker, Credential Strength, Transaction Simulator

# 1. Phishing URL Checker (regex-based for UPI scams)
def is_phishing_url(url):
    suspicious_patterns = [
        r'up1', r'upi-bank', r'paytm-fake', r'qr-code', r'otp-share', r'sbi-fraud', r'hdfc-scam', r'axis-phish', r'icici-fake'  # UPI-specific patterns
    ]
    for pattern in suspicious_patterns:
        if re.search(pattern, url.lower()):
            return True
    if 'bit.ly' in url or 'tinyurl' in url:  # Common scam shorteners
        return True
    return False

# 2. Credential Strength Checker (simple rules – expand with zxcvbn lib)
def check_credential_strength(password):
    if len(password) < 8:
        return "Weak: Too short"
    if not re.search(r'[A-Z]', password) or not re.search(r'[a-z]', password) or not re.search(r'\d', password):
        return "Weak: Missing uppercase/lowercase/number"
    return "Strong"

# 3. Transaction Alert Simulator (flags high-value or suspicious)
def simulate_transaction(amount, to_account):
    if amount > 100000:  # High-value flag (₹1 lakh+)
        logging.warning("High-value transaction flagged")
    if random.random() < 0.1:  # 10% 'fraud' simulation for testing
        return f"Fraud Alert: Suspicious transaction to {to_account}"
    return "Transaction Approved"

# Demo Usage
url = "fake-upi-bank.com/pay"
print("Phishing check:", is_phishing_url(url))

password = "StrongP@ss123"
print("Credential strength:", check_credential_strength(password))

print(simulate_transaction(150000, "unknown@axis.com"))

Phishing check: True
Credential strength: Strong
WARNING:root:High-value transaction flagged
Transaction Approved

MIT License

Copyright (c) 2026 Bivash Kumar Nayak (CyberDudeBivash) – CYBERDUDEBIVASH Pvt Ltd, Bhubaneswar, India

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

CyberDudeBivash Brand Notice:
This tool is released under the MIT License with the explicit condition that any derivative work, fork, or public redistribution must retain visible attribution to "CYBERDUDEBIVASH" (including the full brand name, logo if applicable, and link to https://cyberdudebivash.com or @CyberDudeBivash) in the README, UI, or documentation. Commercial use for fraud-related services requires prior written permission from Bivash Kumar Nayak (bivash@cyberdudebivash.com).

# CYBERDUDEBIVASH UPI Hardener v1.0  
**India's 2026 Banking Apocalypse Defense Tool**  
Protect your UPI & bank accounts from credential stuffing, phishing, SIM-swap, and card-skimming fraud waves.

### The Threat – Real 2026 Numbers
- **1.2 crore+ accounts** compromised in Jan–Feb 2026 (SBI, HDFC, Axis, ICICI, others)  
- Credential stuffing, UPI phishing, card-skimming malware  
- Dark-web dumps of 12M+ accounts  
- NPCI fraud alerts – losses in **crores**  
- AI deepfakes, voice cloning, fake apps, QR scams, SIM-swaps  

**CyberDudeBivash roars:** UPI convenience = fraud superhighway. Banks still rely on SMS OTPs in 2026 – laughable. Evolve or get harvested.

### What This Tool Does
- **Phishing URL Checker** – Detects suspicious UPI/fake banking links  
- **Credential Strength Analyzer** – Flags weak passwords before they get stuffed  
- **Transaction Fraud Simulator** – Tests high-value / suspicious tx behavior  
- **Lightweight & local** – No cloud, no tracking, runs on your machine

### Installation (2 minutes)

```bash
# Clone the repo
git clone https://github.com/cyberdudebivash/CYBERDUDEBIVASH-UPI-HARDENER.git
cd CYBERDUDEBIVASH-UPI-HARDENER

# (Optional) Create virtual environment
python -m venv venv
source venv/bin/activate  # Linux/Mac
venv\Scripts\activate     # Windows

# Install requirements (minimal)
pip install -r requirements.txt

# No external packages needed for core functionality
# Optional: pip install zxcvbn-python  # for advanced password strength

python upi_hardener.py

Phishing check: True (fake-upi-bank.com/pay)
Credential strength: Strong
WARNING: High-value transaction flagged
Transaction Approved