PythonIntermediate
Audit likely private-key file modes
Flag POSIX group or other permission bits on likely private-key files without reading contents.
Security checks
25 practical automations
Security checks
Inspect your own files and configuration. Each guide includes full code, usage instructions, and ideas for making it your own.
Search this category ↗PythonIntermediate
Audit writable PATH directories
Check PATH directories for existence, current-user writability, and duplicate resolution order.
Security checks
PythonIntermediate
Check an owned endpoint TLS certificate
Make one verified TLS connection and report the leaf certificate expiry and protocol.
Security checks
PythonIntermediate
Compare environment-file names
Compare declared environment-variable names with a template and detect duplicates without printing values.
Security checks
PythonIntermediate
Create a SHA-256 manifest
Create a new relative-path SHA-256 manifest for regular files under a selected directory.
Security checks
PythonIntermediate
Create or verify a password hash record
Use PBKDF2-HMAC-SHA256 with a random salt and an interactive password prompt to create or verify a local record.
Security checks
PythonIntermediate
Explain a POSIX file mode
Translate one local POSIX mode into owner, group, and other read/write/execute permissions.
Security checks
PythonIntermediate
Find credentials embedded in URL lists
Inspect URL lines for embedded user information and insecure HTTP without printing credential values.
Security checks
PythonIntermediate
Find extension and signature mismatches
Compare common file extensions with known header bytes without opening files in an application.
Security checks
PythonIntermediate
Find likely secret declarations locally
Report filenames and line numbers for likely credential declarations without printing matching values.
Security checks
PythonIntermediate
Find reused SSH host-key fingerprints
Group known_hosts entries by public-key fingerprint without printing key material.
Security checks
PythonIntermediate
Find symlinks leaving a directory
Report symbolic links whose resolved targets leave a selected root without following linked directories.
Security checks
PythonIntermediate
Find world-writable regular files
Report regular files with the POSIX others-write bit under a selected directory.
Security checks
PythonIntermediate
Fingerprint a PEM certificate bundle
Calculate SHA-256 fingerprints and detect repeated certificates in a local PEM bundle.
Security checks
PythonIntermediate
Fingerprint SSH public keys
Print SHA-256 fingerprints for OpenSSH public key lines without showing comments or key bytes.
Security checks
PythonIntermediate
Generate cryptographic random tokens
Generate a bounded set of URL-safe random tokens using the operating-system randomness source.
Security checks
PythonIntermediate
Inspect HTTP security headers
Make one HEAD request to an owned endpoint and report selected browser security headers.
Security checks
PythonIntermediate
Inspect one CORS response
Send one HEAD request with a synthetic Origin and inspect CORS response declarations.
Security checks
PythonIntermediate
Inventory executable file modes
List regular files with POSIX execute bits and highlight writable executables.
Security checks
PythonIntermediate
Review confusing Unicode filenames
Flag bidirectional controls and mixed Latin/Cyrillic/Greek scripts in filenames.
Security checks
PythonIntermediate
Review cookie attributes without values
Inspect Set-Cookie attribute presence from one HEAD response while omitting cookie values.
Security checks
PythonIntermediate
Review Python dependency sources
Inspect a requirements file for plaintext URLs, direct references, and unpinned package declarations.
Security checks
PythonIntermediate
Review risky JSON configuration switches
Walk a local JSON configuration and flag selected debug, TLS-verification, and wildcard-origin settings.
Security checks
PythonIntermediate
Review SSH client option risks
Flag selected SSH client options in a local configuration without connecting to any host.
Security checks
PythonIntermediate
Verify a SHA-256 manifest
Compare local files with a saved manifest and report missing or changed files.
Security checks