Coder Legion - Recent posts tagged scanner

The Third Bombshell of the Night: I Wrote a Multi-Threaded ARP Network Scanner and Port Analyzer Usi

Tue, 27 Oct 2026 20:58:23 +0000

Well, Coder Legion community, sleep has completely slipped my mind tonight! After working on Duino-Coin optimization and a trigonometric roulette physics engine, I’ve now switched into "cybersecurity mode."
Like any "delightfully eccentric" programmer curious about what’s happening on their local network—using nothing but an old, trusty computer with an i5-4200U processor and 4GB of RAM—I’ve coded my own Aggressive ARP Network Scanner using Python’s scapy and socket libraries.
What does this script do?

Autonomous Device Detection: It stealthily fires ARP requests across the local network, sniffing out active devices and their MAC addresses within the subnet mask.
Multi-Threaded Rapid Port Scanning: It employs a multi-threaded scanning mechanism to uncover open ports on the detected devices—delivering lightning-fast results without freezing up my aging machine.
In the middle of the night, in my excitement, I even uploaded the code to GitHub twice—once with a Turkish character in the filename (ağ.py) and once without (ag.py)! (The "hacker" adrenaline—forgive me!) I’ve sent so much packet traffic through my home router that it’s probably crying right now, as if a cybercrime unit just raided the place.
I feel like an elite cybersecurity expert, hacking the world from a dark room. You can find the code on my GitHub profile (kozmonot20). Let’s just hope I don’t end up blowing up my smart TV or the router!
73! (Best regards, Cyber Crab)

user-scanner

Sat, 22 Nov 2025 14:13:01 +0000

User Scanner

Scan a username across multiple social, developer, and creator platforms to see if it’s available.
Perfect for finding a unique username across GitHub, Twitter, Reddit, Instagram, and more, all in one command.

Github: https://github.com/kaifcodec/user-scanner

Features

✅ Check usernames across social networks, developer platforms, and creator communities.
✅ Clear Available / Taken / Error output for each platform.
✅ Fully modular: add new platform modules easily.
✅ Command-line interface ready: works directly after pip install.
✅ Can be used as username OSINT tool.
✅ Very low and lightweight dependencies, can be run on any machine.

Installation

pip install user-scanner

Usage

Scan a username across all platforms:

user-scanner -u <username>

Optionally, scan a specific category or single module:

user-scanner -u <username> -c dev
user-scanner -l # Lists all available modules
user-scanner -u <username> -m github

Example Output:

Note*: New modules are constantly getting added so this might have only limited, outdated output:

 Checking username: johndoe078

== DEV SITES ==
  [✔] Codeberg: Available
  [✔] Cratesio: Available
  [✔] Dockerhub: Available
  [✘] Github: Taken
  [✔] Gitlab: Available
  [✔] Launchpad: Available
  [✔] Npmjs: Available
  [✔] Replit: Available

== SOCIAL SITES ==
  [✔] Bluesky: Available
  [✔] Discord: Available
  [✘] Instagram: Taken
  [✔] Mastodon: Available
  [✔] Pinterest: Available
  [✘] Reddit: Taken
  [✔] Snapchat: Available
  [✔] Telegram: Available 
  [✘] Threads: Taken
  [✔] X (Twitter): Available
  [✔] Youtube: Available

== CREATOR SITES ==
  [✔] Devto: Available
  [✔] Hashnode: Available
  [✔] Kaggle: Available
  [✔] Medium: Available
  [✔] Patreon: Available

== COMMUNITY SITES ==
  [✔] Coderlegion: Available

== GAMING SITES ==
  [✔] Chess_com: Available
  [✔] Osu: Available
  [✔] Roblox: Available
  ...
  ...
  ...

Contributing:

Modules are organized by category:

user_scanner/
├── dev/        # Developer platforms (GitHub, GitLab, etc.)
├── social/     # Social platforms (Twitter/X, Reddit, Instagram, etc.)
├── creator/    # Creator platforms (Hashnode, Dev.to, Medium, etc.)
├── community/  # Community platforms (forums, niche sites)
├── gaming/     # Gaming sites (chess.com, roblox, monkeytype etc.)

Module guidelines:

Each module must define a validate_<site>() function that takes a username and returns:
- 1 → Available
- 0 → Taken
- 2 → Error / Could not check
Use httpx for requests, colorama for colored output.
Optional: modules can define a CLI parser if they support custom arguments.

Dependencies:

⚠️ `community/` and `gaming/` are small, looking for contributions

BelZSpeedScann Ismoy

Sat, 30 Aug 2025 04:32:45 +0000

Scan Barcodes in Just 3 Lines with BelZSpeedScan (Kotlin Multiplatform/Android)

Scanning barcodes is a common feature in mobile apps — from retail and logistics to fintech and personal productivity. But implementing a barcode scanner that works across Android and iOS can be painful.

That’s why I built BelZSpeedScan
: a Kotlin Multiplatform library that lets you integrate a barcode scanner with just 3 lines of code.

Installation

Add the dependency from Maven Central:

implementation("io.github.ismoy:belzspeedscan:1.0.12")

Usage: Only 3 Lines

Here’s how you can open the scanner and capture the result in your Compose Multiplatform project:

 var showScanner by remember { mutableStateOf(false) } 

if (showScanner) {
    BelZSpeedScanner(
        onCodeScanned = { code -> 
            // Handle scanned result here
        }
    )
}

Button(onClick = { showScanner = true }) {
    Text("Scan")
}

That’s it! When the user taps Scan, the camera opens, detects the barcode, and returns the result in onCodeScanned.

Why BelZSpeedScan?

Multiplatform ready: Works on Android & iOS.
Zero boilerplate: No need to handle camera APIs or decoding manually.
Production-ready: Lightweight, fast, and easy to drop into your
project.

Get Started

Check out the full documentation and source code here:
https://github.com/ismoy/BelZSpeedScan

If you try it out, I’d love your feedback and contributions! ⭐

Security Scanner

Sun, 03 Aug 2025 22:32:56 +0000

Most security scanners overwhelm you with hundreds of warnings about theoretical vulnerabilities that rarely occur. Vibe-Guard was built to focus only on real, actionable security issues that put your applications at risk.

The Problem with Most Security Tools

Most scanners flag:

Theoretical vulnerabilities that rarely occur in practice
Dependencies your code doesn't even use
Configuration warnings that do not impact your application
Slow scans that kill performance

What Really Matters for Security

By studying thousands of real-world security incidents, I distilled 25 practical rules that detect actual vulnerabilities developers frequently introduce.

Rule #1: Detect Exposed Secrets (happens more often than you think)

// ❌ Dangerous: hardcoded secrets
const apiKey = "sk-1234567890abcdef1234567890abcdef";
const databaseUrl = "mongodb://user:password@localhost:27017";

// ✅ Secure: use environment variables
const apiKey = process.env.API_KEY;
const databaseUrl = process.env.DATABASE_URL;

Why: Over 70% of data breaches involve leaked credentials. Catching exposed secrets early prevents costly leaks.

Rule #2: Prevent SQL Injection

// ❌ Vulnerable: string concatenation
const query = `SELECT * FROM users WHERE id = ${userId}`;

// ✅ Safe: parameterized queries
const query = 'SELECT * FROM users WHERE id = ?';
db.query(query, [userId]);

Why: SQL injection remains the top web application vulnerability per OWASP.

Rule #3: Detect Cross-Site Scripting (XSS)

// ❌ Unsafe: direct HTML insertion
element.innerHTML = userInput;

// ✅ Safe: use text content
element.textContent = userInput;

Why: XSS attacks can steal user sessions and inject malicious scripts.

Blazing Performance

Vibe-Guard is engineered for speed, designed to scan large codebases in seconds. Zero dependencies, optimized patterns, and efficient processing make it the fastest security scanner available.

Core Performance Metrics

Startup Time: ~41ms (near-instant startup)
Small File Scan: ~51ms (files under 1KB)
Large File Scan: ~117ms (files 50KB+)
Memory Usage: ~56KB peak, ~28KB average
Directory Scan: ~123ms (entire project directories)
Performance Comparison:
Tool: Vibe-Guard
- Startup: ~41ms
- Small File: ~51ms
- Large File: ~117ms
- Memory: ~56KB
- Dependencies: 0

Tool: Other Tools
Startup: 2-5s
- Small File: 500ms-2s
- Large File: 5-15s
- Memory: 50-200MB
- Dependencies: 50-200

Improvement vs Others
- Startup: 200-300x faster
- Small File: 20-80x faster
- Large File: 40-125x faster
- Memory: 6-25x less
- Dependencies: Zero

Real-World Performance

Small Projects (1-10 files): <100ms scan time
Medium Projects (100-1000 files): 1-3s scan time
Large Projects (1000+ files): 5-15s scan time
Enterprise Codebases (10,000+ files): 30-60s scan time

Why Speed Matters

No workflow interruption scans complete before you notice
CI/CD friendly doesn't slow down your build pipeline
Real-time feedback instant results for immediate fixes
Developer productivity focus on coding, not waiting
Memory efficient minimal resource usage even on large projects

Zero Dependencies = Zero Issues

Installation and usage:

npm install -g vibe-guard
vibe-guard scan

No config files, no setup. Zero dependencies means:
Instant installation
No supply chain risks
️ Offline-ready
Minimal footprint

Real Vulnerabilities Found in Real Projects

Tested across 50+ open-source projects, Vibe-Guard revealed:
Express.js: 3 exposed secrets, 2 SQL injection points
React Admin: 1 XSS vulnerability, 1 insecure config
Vue.js E-commerce: 2 exposed API keys, 1 directory traversal

All were genuine security risks that could be exploited.

The 25 Essential Security Rules

Exposed Secrets – API keys, tokens, passwords
SQL Injection – unsafe database queries
XSS Detection – cross-site scripting
Directory Traversal – path manipulation
Insecure File Uploads – malicious files
Hardcoded Sensitive Data
Missing Authentication
Insecure HTTP – no HTTPS
Open CORS – overly permissive settings
Missing CSRF Protection
Weak Session Management
Insecure Error Handling
Sensitive Data in Logs
Predictable Randomness
Missing Security Headers
Weak Default Configuration
Vulnerable Dependencies
Insecure Deserialization
Missing Input Validation
Broken Access Control
AI Data Leakage
AI Agent Access Control
AI Prompt Injection
Model Context Protocol (MCP) Security
AI-Generated Code Validation

How to Get Started

# Install globally
npm install -g vibe-guard

# Scan your project
vibe-guard scan

# Scan specific rules
vibe-guard scan src/ --rules exposed-secrets,sql-injection

# Generate detailed report
vibe-guard scan --format json --output report.json

Why Vibe-Guard Stands Out

A: Detects only real vulnerabilities
B: Zero dependencies: fast and secure
C: Developer-friendly with clear explanations and fixes
D: Ultra-fast scans measured in milliseconds
E: Cross-platform: macOS, Linux, Windows

Join the Movement

Vibe-Guard is growing rapidly with nearly 500 downloads. Join developers fed up with noisy, ineffective security tools.

Star on GitHub: github.com/Devjosef/vibe-guard
Visit Homepage: devjosef.github.io/vibe-guard
Install: npm install -g vibe-guard
Documentation: devjosef.github.io/vibe-guard
Community: What security rules would you like to add?

The Future of Security Scanning

Security tools should:
Detect real vulnerabilities
Run lightning-fast
Be easy to use
Have zero false positives

Vibe-Guard shows that this is possible.

Supplementary Reading

To deepen your understanding of security best practices and the context behind these rules, consider exploring these authoritative resources:

Verizon Data Breach Investigations Report (DBIR) — Annual comprehensive analysis of data breaches and cyberattack trends.

OWASP Top Ten The industry standard awareness document for the most critical web application security risks.

GitGuardian: State of Secrets Sprawl (2025) Insight into how exposed secrets contribute to security breaches.

"The Web Application Hacker's Handbook" by Dafydd Stuttard and Marcus Pinto: Widely respected guide on practical web app security testing and defense.

"Security Engineering" by Ross Anderson: Deep dive into the principles and practicalities of building secure systems.

NIST Cybersecurity Framework Guidelines and best practices for managing and reducing cybersecurity risk.

OWASP Cheat Sheet Series — Practical, frequently updated advice and patterns for developers to build secure software.

Ready to secure your codebase? Try Vibe-Guard today and experience security scanning that actually works.

I Made CR4SH3R: Tool for Automating Vulnerability Detection in WordPress Plugins

Thu, 26 Jun 2025 23:17:04 +0000

A couple of months ago, I came across a WordPress site that needed a quick security check for obvious vulnerabilities. It all started with routine work: standard checks, searching for known CVEs, and inspecting popular plugins. But what I found made me think more seriously — critical Arbitrary File Download vulnerabilities in several plugins that allowed access to wp-config.php with just a few requests

This became the reason for creating CR4SH3R — a simple yet powerful tool designed to automate the detection of such vulnerabilities within the WordPress ecosystem

What is it?

CR4SH3R is a GUI utility designed to scan websites for Arbitrary File Download vulnerabilities in WordPress plugins. Its main purpose is to detect paths through which the wp-config.php file can be downloaded, and automatically extract sensitive information from it — such as database login credentials and other important parameters

Screenshots

How does it work?

The scanner uses a pre-prepared list of potentially vulnerable URL paths and sends HTTP requests to the target domain. If the server returns the contents of the wp-config.php file, the program parses it and displays only the relevant data. There’s also an option to save results in .xlsx format

Example payload:
/wp-content/plugins/vulnerable-plugin/download.php?file=../../../../wp-config.php

Key Features:

Multi-threaded Scanning
Fast scanning using concurrent request processing. Supports up to 10 simultaneous checks
Automatic Data Extraction from wp-config.php
If the file is found, CR4SH3R automatically extracts values like:
DB_NAME
DB_USER
DB_PASSWORD
DB_HOST
table_prefix
Excel (.xlsx) Report Generation
All findings are saved in a structured and easy-to-share format
Simple GUI Interface
Built using PyQt5 for user-friendly interaction

Roadmap:

Auto-updater — built-in version checker
Config Presets — save and load frequently used scan settings
Session History — track previous scans with timestamps and results
Encrypted .env File — prevent plaintext exposure when bundled into binaries

Repository Link

https://github.com/m-o-z-z-i-x/CR4SH3R

I Made NR34P3R: Fast Multi-Threaded Port Scanner for Detecting Open Ports & Services

Thu, 26 Jun 2025 23:16:38 +0000

A few months ago I found myself in need of a lightweight port scanner that could deliver actionable insights quickly without bloating system resources or drowning me in irrelevant data. Existing tools felt either too bulky or too barebones, so I decided to build something new — NR34P3R , a fast, multi-threaded port scanner with an intuitive terminal interface and smart service detection

What is it?

NR34P3R is a modern port scanner designed to help security professionals and sysadmins detect open ports and identify associated services with precision. It supports multi-threaded scanning for maximum efficiency, automatically resolves over 3000 service names, and presents results in a clean, color-coded format using Rich tables

Demo

How does it work?

NR34P3R uses a modular scanning engine that leverages Python's socket library and advanced concurrency. You define a target host and specify a port range — single ports, custom ranges (80-443), or full-range scans (1-65535). The scanner then sends asynchronous requests and collects responses, resolving service names and descriptions from its built-in database

When a port is found open, NR34P3R automatically fetches service metadata including protocol, description, and known vulnerabilities (if available), giving you immediate context for further investigation

Key Features:

Ultra-Fast Multi-threaded Scanning
Supports up to 100 concurrent threads for lightning-fast scans across large port ranges
Rich Service Database
Automatically identifies over 3000 services with detailed descriptions powered by WikiLess integration
Colorful Terminal UI
Interactive output with live progress bars, syntax highlighting, and adaptive formatting via Colorama and Rich
Structured Results
Displays findings in organized tables showing port number, service name, status, and description
Flexible Scanning Options
Supports single ports, custom ranges, or full-range scans from 1 to 65535

Roadmap:

ASN Lookup — Identify network ownership for scanned hosts
JSON Reporting — Export scan results for documentation and analysis
Ping Sweep — Check host availability before scanning
Port Test Tool — Verify specific port configurations and firewall rules

Repository Link

https://github.com/m-o-z-z-i-x/NR34P3R

Coder Legion - Recent posts tagged scanner

The Third Bombshell of the Night: I Wrote a Multi-Threaded ARP Network Scanner and Port Analyzer Usi

user-scanner

User Scanner

Features

Installation

Usage

Example Output:

Contributing:

Dependencies:

⚠️ community/ and gaming/ are small, looking for contributions

BelZSpeedScann Ismoy

Scan Barcodes in Just 3 Lines with BelZSpeedScan (Kotlin Multiplatform/Android)

Installation

Usage: Only 3 Lines

Why BelZSpeedScan?

Get Started

Security Scanner

The Problem with Most Security Tools

What Really Matters for Security

Rule #1: Detect Exposed Secrets (happens more often than you think)

Rule #2: Prevent SQL Injection

Rule #3: Detect Cross-Site Scripting (XSS)

Blazing Performance

Core Performance Metrics

Real-World Performance

Why Speed Matters

Zero Dependencies = Zero Issues

Real Vulnerabilities Found in Real Projects

The 25 Essential Security Rules

How to Get Started

Why Vibe-Guard Stands Out

Join the Movement

The Future of Security Scanning

Supplementary Reading

I Made CR4SH3R: Tool for Automating Vulnerability Detection in WordPress Plugins

What is it?

Screenshots

How does it work?

Key Features:

Roadmap:

Repository Link

I Made NR34P3R: Fast Multi-Threaded Port Scanner for Detecting Open Ports & Services

What is it?

Demo

How does it work?

Key Features:

Roadmap:

Repository Link

⚠️ `community/` and `gaming/` are small, looking for contributions