Nodeprobe

Local CLI security scanner for websites, multi-chain RPC nodes, and EVM smart contracts.

Probe HTTP/TLS, JSON-RPC and GraphQL RPC, and contract posture from your terminal. Local-first for infrastructure you operate or are authorized to assess. No account. No cloud. No telemetry.

pipx install nodeprobe
nodeprobe web https://example.com

Homebrew and Debian/Ubuntu block pip install into system Python. Use pipx or a virtual environment (python3 -m venv .venv && source .venv/bin/activate && pip install nodeprobe). Do not pass --break-system-packages.

Default profile is Standard. Use --profile Quick for a fast pass, or --profile Deep for a larger budget.

What it covers

Surface	What Nodeprobe looks at
Web	TLS, security headers (presence + HSTS/CSP policy grading), `security.txt`, `robots.txt`, server disclosure
RPC	Protocol families: EVM, Solana, Substrate/Polkadot, Cosmos, Aptos, Sui, Starknet, NEAR — auto-detect or `--family`
Contracts	EVM code presence, proxies, bytecode heuristics, Sourcify verification (read-only)

EVM networks share one engine. nodeprobe scan <rpc> works for any EVM chain. Chain names come from a bundled Chainlist snapshot; unknown IDs still scan with a generic name. New chain IDs in that snapshot ship as a PyPI patch release.

Quick start

# Website
nodeprobe web https://example.com

# EVM RPC — any EVM chain
nodeprobe scan https://rpc.example.com

# Other protocol families
nodeprobe rpc https://api.mainnet-beta.solana.com
nodeprobe substrate https://rpc.polkadot.io
nodeprobe cosmos https://rpc.cosmos.directory:443
nodeprobe aptos https://fullnode.mainnet.aptoslabs.com/v1
nodeprobe sui https://graphql.mainnet.sui.io/graphql
nodeprobe starknet https://rpc.starknet.lava.build
nodeprobe near https://rpc.mainnet.near.org

# Contract (read-only)
nodeprobe contract 0x… --rpc https://rpc.example.com --chain 1

Human reports are the default. Use --html -o report.html or --json --pretty for other formats.

Safety by design

Blocks SSRF paths: private IPs, localhost, cloud metadata
Enforces per-profile request, RPS, and duration budgets
Kill switch: touch /tmp/nodeprobe-kill or set NODEPROBE_KILL_SWITCH
Escalation confirms impact — no exploit payloads, no funded transactions

Authorized use only. Scan systems you own or have permission to assess.

Docs and source

Full examples, screenshots, and development setup: github.com/ehsanhajian/nodeprobe

License

MIT

Metadata

Release files for nodeprobe 0.1.6

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for nodeprobe 0.1.6
File	Size	Uploaded
nodeprobe-0.1.6.tar.gz	131.4 kB	Oct 8, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for nodeprobe 0.1.6
File	Interpreter	ABI	Platform	Reset
nodeprobe-0.1.6-py3-none-any.whl 145.3 kB Oct 8, 2026	Python 3	none	any	Details

Total release size: 276.6 kB

Release files / nodeprobe-0.1.6.tar.gz

Download URL	nodeprobe-0.1.6.tar.gz
Size	131.4 kB
Tags	Source
SHA-256 checksum How to use checksums	`9bfbbfc1bda557f4604230f25c88f9299cbbb223a926f86218ea38a322d3377a`
BLAKE2b-256 checksum How to use checksums	`f042d44e86c756df9adae6c2ad0da20df1a6211f01ffbba1d6b3498f97cb5866`
Upload date	Oct 8, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/ehsanhajian/nodeprobe
Publishing commit: github.com/ehsanhajian/nodeprobe/tree/b0e6f5d53b40bc968a585fea8593dad6a54efaad

Workflow

Publishing configuration: github.com/ehsanhajian/nodeprobe/blob/b0e6f5d53b40bc968a585fea8593dad6a54efaad/.github/workflows/publish-pypi.yml
Publishing logs: github.com/ehsanhajian/nodeprobe/actions/runs/37798715012/attempts/1

Artifact

Subject: nodeprobe-0.1.6.tar.gz
SHA-256 checksum: 9bfbbfc1bda557f4604230f25c88f9299cbbb223a926f86218ea38a322d3377a Verifying attestations

Release files / nodeprobe-0.1.6-py3-none-any.whl

Download URL	nodeprobe-0.1.6-py3-none-any.whl
Size	145.3 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`6dc4bfef187fb261ee29bc37c4fb3a5167128d1d07075ae5655d2292da17c01d`
BLAKE2b-256 checksum How to use checksums	`b4defc9a7cee5eebe2cc5e561899251db866ab2ef146a195d53bf0aef7cdae97`
Upload date	Oct 8, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/ehsanhajian/nodeprobe
Publishing commit: github.com/ehsanhajian/nodeprobe/tree/b0e6f5d53b40bc968a585fea8593dad6a54efaad

Workflow

Publishing configuration: github.com/ehsanhajian/nodeprobe/blob/b0e6f5d53b40bc968a585fea8593dad6a54efaad/.github/workflows/publish-pypi.yml
Publishing logs: github.com/ehsanhajian/nodeprobe/actions/runs/37798715012/attempts/1

Artifact

Subject: nodeprobe-0.1.6-py3-none-any.whl
SHA-256 checksum: 6dc4bfef187fb261ee29bc37c4fb3a5167128d1d07075ae5655d2292da17c01d Verifying attestations