|
|
import os |
|
|
import json |
|
|
import datetime |
|
|
|
|
|
class SecurityScanner: |
|
|
def __init__(self, target_dir): |
|
|
self.target_dir = target_dir |
|
|
self.results = { |
|
|
"scan_time": str(datetime.datetime.now()), |
|
|
"vulnerabilities": [], |
|
|
"summary": {"high": 0, "medium": 0, "low": 0} |
|
|
} |
|
|
|
|
|
def scan_files(self): |
|
|
print(f"Starting security scan on: {self.target_dir}") |
|
|
for root, dirs, files in os.walk(self.target_dir): |
|
|
for file in files: |
|
|
if file.endswith(('.py', '.js', '.html')): |
|
|
self._check_file(os.path.join(root, file)) |
|
|
|
|
|
self._save_results() |
|
|
|
|
|
def _check_file(self, file_path): |
|
|
|
|
|
patterns = { |
|
|
"hardcoded_api_key": {"regex": "api_key =", "severity": "high", "desc": "Potential hardcoded API key found"}, |
|
|
"insecure_eval": {"regex": "eval\(", "severity": "high", "desc": "Use of insecure eval() function"}, |
|
|
"todo_comment": {"regex": "TODO:", "severity": "low", "desc": "Unresolved TODO comment"} |
|
|
} |
|
|
|
|
|
try: |
|
|
with open(file_path, 'r', errors='ignore') as f: |
|
|
content = f.read() |
|
|
for key, data in patterns.items(): |
|
|
if data["regex"] in content: |
|
|
self.results["vulnerabilities"].append({ |
|
|
"file": file_path, |
|
|
"issue": key, |
|
|
"severity": data["severity"], |
|
|
"description": data["desc"] |
|
|
}) |
|
|
self.results["summary"][data["severity"]] += 1 |
|
|
except Exception as e: |
|
|
print(f"Error scanning {file_path}: {e}") |
|
|
|
|
|
def _save_results(self): |
|
|
output_path = os.path.join(self.target_dir, 'public/data/security_scan_latest.json') |
|
|
os.makedirs(os.path.dirname(output_path), exist_ok=True) |
|
|
with open(output_path, 'w') as f: |
|
|
json.dump(self.results, f, indent=4) |
|
|
print(f"Scan complete. Results saved to {output_path}") |
|
|
|
|
|
if __name__ == "__main__": |
|
|
scanner = SecurityScanner('.') |
|
|
scanner.scan_files() |
|
|
|
