sf

Static safety code scanner (SAST) for Node.js applications. Configure & Run NodeJsScan Install Postgres as well as configure SQLALCHEMY_DATABASE_URI inwards core/settings.py pip3 install -r requirements.txt python3 migrate.py # Run 1 time to practise database entries required python3 app.py # Testing Environment gunicorn -b 0.0.0.0:9090 app:app # Production Environment This volition run NodeJsScan on http://0.0.0.0:9090 If you lot take away to debug, gear upwardly DEBUG = True inwards core/settings.py NodeJsScan CLI The command line interface (CLI) allows you lot to integrate NodeJsScan amongst DevSecOps CI/CD pipelines. The results are inwards JSON format. When you lot usage CLI the results are never stored amongst NodeJsScan backend. virtualenv venv -p python3 source venv/bin/activate (venv)pip install nodejsscan (venv)$ nodejsscan usage: nodejsscan [-h] [-f FILE [FILE ...]] [-d DIRECTORY [DIRECTORY ...]] [-o OUTPUT] [-v] optional arguments: ...

Hayat is a auditing & hardening script for Google Cloud Platform services such as: Identity & Access Management Networking Virtual Machines Storage Cloud SQL Instances Kubernetes Clusters for now. Identity & Access Management Ensure that corporate login credentials are used instead of Gmail accounts. Ensure that at that spot are entirely GCP-managed service trouble concern human relationship keys for each service account. Ensure that ServiceAccount has no Admin privileges. Ensure that IAM users are non assigned Service Account User role at projection level. Networking Ensure the default network does non be inward a project. Ensure legacy networks does non exists for a project. Ensure that DNSSEC is enabled for Cloud DNS. Ensure that RSASHA1 is non used for key-signing cardinal inward Cloud DNS DNSSEC. Ensure that RSASHA1 is non used for zone-signing cardinal inward Cloud DNS DNSSEC. Ensure that RDP access is restricted from the Internet. Ensur...

Electronegativity is a tool to position misconfigurations together with safety anti-patterns inward Electron -based applications. It leverages AST together with DOM parsing to hold off for security-relevant configurations, every bit described inward the "Electron Security Checklist - Influenza A virus subtype H5N1 Guide for Developers together with Auditors" whitepaper. Software developers together with safety auditors tin role this tool to disclose together with mitigate potential weaknesses together with implementation bugs when developing applications using Electron. Influenza A virus subtype H5N1 proficient agreement of Electron (in)security is all the same required when using Electronegativity, every bit approximately of the potential issues detected past times the tool request manual investigation. If you're interested inward Electron Security, convey a hold off at our BlackHat 2017 query Electronegativity - Influenza A virus subtype H5N1 Study of Elec...

Pyrit allows you lot to practice massive databases of pre-computed WPA/WPA2-PSK authentication stage inward a space-time-tradeoff. By using the computational might of Multi-Core CPUs in addition to other platforms through ATI-Stream , Nvidia CUDA in addition to OpenCL , it is currently past times far the most powerful assault against 1 of the world's most used security-protocols. WPA/WPA2-PSK is a subset of IEEE 802.11 WPA/WPA2 that skips the complex draw of piece of occupation of cardinal distribution in addition to customer authentication past times assigning every participating political party the same pre shared key . This master key is derived from a password which the administrating user has to pre-configure e.g. on his laptop in addition to the Access Point. When the laptop creates a connecter to the Access Point, a novel session key is derived from the master key to encrypt in addition to authenticate next traffic. The "shortcut" of using a unmarried ...