PLTECH Scanner is a comprehensive command-line security scanner for checking various security measures in code repositories. It supports multiple programming languages and provides detailed reports on potential vulnerabilities.
- String Input Sanitization (SQL Injection, XSS, DOM-based Injection)
- CORS Configuration Analysis
- Authentication Implementation Checks
- Authorization Setup Verification
- Detailed Terminal and HTML Reports
To install PLTECH Scanner globally, use npm:
npm install -g pltech-scanner
After installing the scanner, you can use it from any directory by running:
pltech-scanner [options] <path-to-repository>
--all,-a: Run all scans--string,-s: Run string input sanitization scan--cors,-c: Run CORS configuration scan--auth,-u: Run authentication scan--authz,-z: Run authorization scan--no-open,-n: Do not automatically open the HTML report
Run all scans on the current directory:
pltech-scanner --all .
Run only string input sanitization and CORS configuration scans:
pltech-scanner --string --cors /path/to/your/repo
Run authentication and authorization scans without opening the HTML report:
pltech-scanner --auth --authz --no-open /path/to/your/repo
The scanner generates two types of reports:
- A detailed, colorful terminal report that provides an overview of the scan results.
- An interactive HTML report with charts and detailed vulnerability information.
By default, the HTML report is automatically opened in your default web browser after the scan. You can disable this behavior with the --no-open option.
The scanner supports analysis of the following languages:
- JavaScript
- Python
- PHP
- Java
The scanner ignores common package and build directories such as node_modules, lib, vendor, dist, build, .venv, venv, env, __pycache__, and .git.
Contributions are welcome! Please feel free to submit a Pull Request.
This project is licensed under the ISC License.