Nodeprobe

Local CLI security scanner for websites, multi-chain RPC nodes, and EVM smart contracts.

Probe HTTP/TLS, JSON-RPC and GraphQL RPC, and contract posture from your terminal. Local-first for infrastructure you operate or are authorized to assess. No account. No cloud. No telemetry.

pipx install nodeprobe
nodeprobe web https://example.com

Homebrew and Debian/Ubuntu block pip install into system Python. Use pipx or a virtual environment (python3 -m venv .venv && source .venv/bin/activate && pip install nodeprobe). Do not pass --break-system-packages.

Default profile is Standard. Use --profile Quick for a fast pass, or --profile Deep for a larger budget.

What it covers

Surface	What Nodeprobe looks at
Web	TLS, security headers (presence + HSTS/CSP policy grading), `security.txt`, `robots.txt`, server disclosure
RPC	Protocol families: EVM, Solana, Substrate/Polkadot, Cosmos, Aptos, Sui, Starknet, NEAR — auto-detect or `--family`
Contracts	EVM code presence, proxies, bytecode heuristics, Sourcify verification (read-only)

EVM networks share one engine. nodeprobe scan <rpc> works for any EVM chain. Chain names come from a bundled Chainlist snapshot; unknown IDs still scan with a generic name. New chain IDs in that snapshot ship as a PyPI patch release.

Quick start

# Website
nodeprobe web https://example.com

# EVM RPC — any EVM chain
nodeprobe scan https://rpc.example.com

# Other protocol families
nodeprobe rpc https://api.mainnet-beta.solana.com
nodeprobe substrate https://rpc.polkadot.io
nodeprobe cosmos https://rpc.cosmos.directory:443
nodeprobe aptos https://fullnode.mainnet.aptoslabs.com/v1
nodeprobe sui https://graphql.mainnet.sui.io/graphql
nodeprobe starknet https://rpc.starknet.lava.build
nodeprobe near https://rpc.mainnet.near.org

# Contract (read-only)
nodeprobe contract 0x… --rpc https://rpc.example.com --chain 1

Human reports are the default. Use --html -o report.html or --json --pretty for other formats.

Safety by design

Blocks SSRF paths: private IPs, localhost, cloud metadata
Enforces per-profile request, RPS, and duration budgets
Kill switch: touch /tmp/nodeprobe-kill or set NODEPROBE_KILL_SWITCH
Escalation confirms impact — no exploit payloads, no funded transactions

Authorized use only. Scan systems you own or have permission to assess.

Docs and source

Full examples, screenshots, and development setup: github.com/ehsanhajian/nodeprobe

License

MIT

Metadata

Release files for nodeprobe 0.1.7

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for nodeprobe 0.1.7
File	Size	Uploaded
nodeprobe-0.1.7.tar.gz	131.6 kB	Oct 12, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for nodeprobe 0.1.7
File	Interpreter	ABI	Platform	Reset
nodeprobe-0.1.7-py3-none-any.whl 145.3 kB Oct 12, 2026	Python 3	none	any	Details

Total release size: 277.0 kB

Release files / nodeprobe-0.1.7.tar.gz

Download URL	nodeprobe-0.1.7.tar.gz
Size	131.6 kB
Tags	Source
SHA-256 checksum How to use checksums	`5e744c879f5f517091fd7bba88d6a6ea279bd962926bc58c2bff71b6d9e5130e`
BLAKE2b-256 checksum How to use checksums	`dc79151868922885af22c945a1e2b486e5b9d7622f65d79f877a3f3997f98e3b`
Upload date	Oct 12, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/ehsanhajian/nodeprobe
Publishing commit: github.com/ehsanhajian/nodeprobe/tree/7b40473d4862db19654062abf2b5fdedc21ca3cf

Workflow

Publishing configuration: github.com/ehsanhajian/nodeprobe/blob/7b40473d4862db19654062abf2b5fdedc21ca3cf/.github/workflows/publish-pypi.yml
Publishing logs: github.com/ehsanhajian/nodeprobe/actions/runs/38279610205/attempts/1

Artifact

Subject: nodeprobe-0.1.7.tar.gz
SHA-256 checksum: 5e744c879f5f517091fd7bba88d6a6ea279bd962926bc58c2bff71b6d9e5130e Verifying attestations

Release files / nodeprobe-0.1.7-py3-none-any.whl

Download URL	nodeprobe-0.1.7-py3-none-any.whl
Size	145.3 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`d80c113d94359fd4a4db6a77d9299059087de43a83c5ad50ffb0dbac7cea83d2`
BLAKE2b-256 checksum How to use checksums	`7b71fea3c2d0798c1db05f8d9f85f1109c7db8352f4b5ff313ac82bdc7641deb`
Upload date	Oct 12, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/ehsanhajian/nodeprobe
Publishing commit: github.com/ehsanhajian/nodeprobe/tree/7b40473d4862db19654062abf2b5fdedc21ca3cf

Workflow

Publishing configuration: github.com/ehsanhajian/nodeprobe/blob/7b40473d4862db19654062abf2b5fdedc21ca3cf/.github/workflows/publish-pypi.yml
Publishing logs: github.com/ehsanhajian/nodeprobe/actions/runs/38279610205/attempts/1

Artifact

Subject: nodeprobe-0.1.7-py3-none-any.whl
SHA-256 checksum: d80c113d94359fd4a4db6a77d9299059087de43a83c5ad50ffb0dbac7cea83d2 Verifying attestations