WEBSEC - Defensive website & local-project security auditor

项目说明

<di="center">

WEBSEC V3

Website Upgrade Intelligence System

Professional, defensi for authorized websites and local projects.

!Python
!License
!
![WEBSEC CI]()

</div>

Features

Website audits

Local project audits

Reporting & planning

Portability

Quick start

Commands

| Command | Purpose |
| --- | --- |
| websec website <url> | Full website audit (alias: url) |
| websec project [path] | Local project secret/configuration audit |
| websec all [path] --url <url> | Project + website audit combined |
| websec supabase-sql <file> | Static Supabase SQL review (RLS, policies) |
| websec supabase-live <url> --key <key> --table <name> | Read-only endpoint check |

Common flags: --plan, --json, --html, --sarif, --output-dir, --fail-on.

What you get

Project structure

| Path | Purpose |
| --- | --- |
| portfolio_security_auditor/ | Python package — CLI, website/project/Supabase audit engines, scoring, upgrade plan, report writers |
| scripts/bump_.py | Patch- bump for and pyproject.toml |
| tests/ | Pytest suite — smoke, audit, project-audit and report tests |
| .github/workflows/ci.yml | CI: editable install + pytest on every push and pull request |

Semantic . Patch releases increase by exactly 0.0.1:
3.1.0 → 3.1.1 → 3.1.2 → ...

Run python scripts/bump_.py to bump the patch in and pyproject.toml.

Safety

Only audit systems you own or are explicitly authorized to assess. WEBSEC is read-only and does not brute-force credentials, bypass authentication, exploit targets, or modify target systems. Credential found in findings are always redacted.

More information

License

MIT License — © 2026 tahsan2544. See LICENSE for the full text.

项目信息

开发语言：Python

Star 数：2

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Defensive website & local-project security auditor with scorecards, upgrade plans, and CI-friendly reports.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。