Security Audit Toolkit
OWASP-oriented static scanner for Python — 12 regex rules covering injection, secrets, unsafe loaders, and misconfig.
| ID | Vulnerability | Severity |
|---|---|---|
| SQLI-001 | SQL Injection (f-string) | CRITICAL |
| SQLI-002 | SQL Injection (concatenation) | CRITICAL |
| XSS-001 | XSS (template) | HIGH |
| HARDCODE-001 | Hardcoded secret | HIGH |
| JWT-001 | JWT no algorithm | HIGH |
| XXE-001 | XML External Entity | HIGH |
| YAML-001 | Unsafe YAML load | CRITICAL |
| PICKLE-001 | Unsafe pickle | CRITICAL |
| REDIRECT-001 | Open Redirect | MEDIUM |
| DEBUG-001 | Debug mode | MEDIUM |
| EVAL-001 | Code injection (eval) | CRITICAL |
| SHELL-001 | Shell injection | CRITICAL |
Quick start
python demo.py
# or
python -c "from src.scanner import SecurityScanner; print(SecurityScanner().scan_file('app.py'))"
Library usage:
from scanner import SecurityScanner
scanner = SecurityScanner()
vulns = scanner.scan_file("app.py")
for v in vulns:
print(f"[{v.severity}] {v.title} at line {v.line}")
print(f" Fix: {v.fix}")
Tests
python3 -m pytest tests/ -q
Layout
src/scanner.py— rules + scannerdemo.py— offline smoke on synthetic vulnstests/— rule coverage
License
MIT · AMEOBIUS-team
Related
- https://github.com/AMEOBIUS-team/tor-hidden-service-template
- https://github.com/AMEOBIUS-team/bounty-hunter-toolkit
- https://github.com/AMEOBIUS-team/fastapi-template
- Portfolio: https://ameobius-team.github.io/kwork-portfolio/
Freelance portfolio: https://ameobius-space.github.io/kwork-portfolio/
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file security_audit_toolkit-0.1.0.tar.gz.
File metadata
- Download URL: security_audit_toolkit-0.1.0.tar.gz
- Upload date:
- Size: 3.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.2.0 CPython/3.10.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5d369ba617149318dcf3f1090649cdf56d6b4a9b8fa0052188c3fc68a922d9a0
|
|
| MD5 |
920dfb28681dd29e67e069481abce1e7
|
|
| BLAKE2b-256 |
ae5de4c1d213e22ad14cd464a9c004a7af93f93da332165502706f36c47e57df
|
File details
Details for the file security_audit_toolkit-0.1.0-py3-none-any.whl.
File metadata
- Download URL: security_audit_toolkit-0.1.0-py3-none-any.whl
- Upload date:
- Size: 2.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.2.0 CPython/3.10.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5981fd9183dcf14ef659244d856a437f1c09f5a7884f2fa6c26b394945b9f557
|
|
| MD5 |
9f64638699109194baadbd841e815d2f
|
|
| BLAKE2b-256 |
83d56c735bd438bcc969813b183aec7674d57038578abeba6f8e36ce3bb771e4
|
