nodeprobe 0.1.3__tar.gz

nodeprobe-0.1.3/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ehsan Hajian
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

nodeprobe-0.1.3/PKG-INFO

@@ -0,0 +1,95 @@
+Metadata-Version: 2.4
+Name: nodeprobe
+Version: 0.1.3
+Summary: Local CLI security scanner for websites, multi-chain RPC, and EVM smart contracts
+Author: Ehsan Hajian
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/ehsanhajian/nodeprobe
+Project-URL: Repository, https://github.com/ehsanhajian/nodeprobe
+Project-URL: Issues, https://github.com/ehsanhajian/nodeprobe/issues
+Project-URL: Releases, https://github.com/ehsanhajian/nodeprobe/releases
+Keywords: security,scanner,cli,rpc,evm,web3,tls
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: Programming Language :: Python
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: Security
+Classifier: Topic :: System :: Networking
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: httpx>=0.27
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == "dev"
+Requires-Dist: pytest-httpx>=0.30; extra == "dev"
+Dynamic: license-file
+
+# Nodeprobe
+
+**Local CLI security scanner for websites, multi-chain RPC nodes, and EVM smart contracts.**
+
+Probe HTTP/TLS, JSON-RPC and GraphQL RPC, and contract posture from your terminal. Local-first for infrastructure you operate or are authorized to assess. No account. No cloud. No telemetry.
+
+```bash
+pip install nodeprobe
+nodeprobe web https://example.com
+```
+
+Default profile is **Standard**. Use `--profile Quick` for a fast pass, or `--profile Deep` for a larger budget.
+
+## What it covers
+
+| Surface | What Nodeprobe looks at |
+|---|---|
+| **Web** | TLS, security headers (presence + HSTS/CSP policy grading), `security.txt`, `robots.txt`, server disclosure |
+| **RPC** | Protocol **families**: EVM, Solana, Substrate/Polkadot, Cosmos, Aptos, Sui, Starknet, NEAR — auto-detect or `--family` |
+| **Contracts** | EVM code presence, proxies, bytecode heuristics, Sourcify verification (read-only) |
+
+EVM networks share one engine. `nodeprobe scan <rpc>` works for any EVM chain. Chain names come from a bundled [Chainlist](https://chainid.network) snapshot; unknown IDs still scan with a generic name.
+
+## Quick start
+
+```bash
+# Website
+nodeprobe web https://example.com
+
+# EVM RPC — any EVM chain
+nodeprobe scan https://rpc.example.com
+
+# Other protocol families
+nodeprobe rpc https://api.mainnet-beta.solana.com
+nodeprobe substrate https://rpc.polkadot.io
+nodeprobe cosmos https://rpc.cosmos.directory:443
+nodeprobe aptos https://fullnode.mainnet.aptoslabs.com/v1
+nodeprobe sui https://graphql.mainnet.sui.io/graphql
+nodeprobe starknet https://rpc.starknet.lava.build
+nodeprobe near https://rpc.mainnet.near.org
+
+# Contract (read-only)
+nodeprobe contract 0x… --rpc https://rpc.example.com --chain 1
+```
+
+Human reports are the default. Use `--html -o report.html` or `--json --pretty` for other formats.
+
+## Safety by design
+
+- Blocks SSRF paths: private IPs, localhost, cloud metadata
+- Enforces per-profile request, RPS, and duration budgets
+- Kill switch: touch `/tmp/nodeprobe-kill` or set `NODEPROBE_KILL_SWITCH`
+- Escalation confirms impact — no exploit payloads, no funded transactions
+
+**Authorized use only.** Scan systems you own or have permission to assess.
+
+## Docs and source
+
+Full examples, screenshots, and development setup: [github.com/ehsanhajian/nodeprobe](https://github.com/ehsanhajian/nodeprobe)
+
+## License
+
+[MIT](https://github.com/ehsanhajian/nodeprobe/blob/main/LICENSE)

nodeprobe-0.1.3/README.md

@@ -0,0 +1,63 @@
+# Nodeprobe
+
+**Local CLI security scanner for websites, multi-chain RPC nodes, and EVM smart contracts.**
+
+Probe HTTP/TLS, JSON-RPC and GraphQL RPC, and contract posture from your terminal. Local-first for infrastructure you operate or are authorized to assess. No account. No cloud. No telemetry.
+
+```bash
+pip install nodeprobe
+nodeprobe web https://example.com
+```
+
+Default profile is **Standard**. Use `--profile Quick` for a fast pass, or `--profile Deep` for a larger budget.
+
+## What it covers
+
+| Surface | What Nodeprobe looks at |
+|---|---|
+| **Web** | TLS, security headers (presence + HSTS/CSP policy grading), `security.txt`, `robots.txt`, server disclosure |
+| **RPC** | Protocol **families**: EVM, Solana, Substrate/Polkadot, Cosmos, Aptos, Sui, Starknet, NEAR — auto-detect or `--family` |
+| **Contracts** | EVM code presence, proxies, bytecode heuristics, Sourcify verification (read-only) |
+
+EVM networks share one engine. `nodeprobe scan <rpc>` works for any EVM chain. Chain names come from a bundled [Chainlist](https://chainid.network) snapshot; unknown IDs still scan with a generic name.
+
+## Quick start
+
+```bash
+# Website
+nodeprobe web https://example.com
+
+# EVM RPC — any EVM chain
+nodeprobe scan https://rpc.example.com
+
+# Other protocol families
+nodeprobe rpc https://api.mainnet-beta.solana.com
+nodeprobe substrate https://rpc.polkadot.io
+nodeprobe cosmos https://rpc.cosmos.directory:443
+nodeprobe aptos https://fullnode.mainnet.aptoslabs.com/v1
+nodeprobe sui https://graphql.mainnet.sui.io/graphql
+nodeprobe starknet https://rpc.starknet.lava.build
+nodeprobe near https://rpc.mainnet.near.org
+
+# Contract (read-only)
+nodeprobe contract 0x… --rpc https://rpc.example.com --chain 1
+```
+
+Human reports are the default. Use `--html -o report.html` or `--json --pretty` for other formats.
+
+## Safety by design
+
+- Blocks SSRF paths: private IPs, localhost, cloud metadata
+- Enforces per-profile request, RPS, and duration budgets
+- Kill switch: touch `/tmp/nodeprobe-kill` or set `NODEPROBE_KILL_SWITCH`
+- Escalation confirms impact — no exploit payloads, no funded transactions
+
+**Authorized use only.** Scan systems you own or have permission to assess.
+
+## Docs and source
+
+Full examples, screenshots, and development setup: [github.com/ehsanhajian/nodeprobe](https://github.com/ehsanhajian/nodeprobe)
+
+## License
+
+[MIT](https://github.com/ehsanhajian/nodeprobe/blob/main/LICENSE)

nodeprobe-0.1.3/pyproject.toml

@@ -0,0 +1,64 @@
+[build-system]
+requires = ["setuptools>=77", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "nodeprobe"
+version = "0.1.3"
+description = "Local CLI security scanner for websites, multi-chain RPC, and EVM smart contracts"
+readme = "README.md"
+requires-python = ">=3.10"
+license = "MIT"
+license-files = ["LICENSE"]
+authors = [{ name = "Ehsan Hajian" }]
+keywords = [
+  "security",
+  "scanner",
+  "cli",
+  "rpc",
+  "evm",
+  "web3",
+  "tls",
+]
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Environment :: Console",
+  "Intended Audience :: Developers",
+  "Intended Audience :: System Administrators",
+  "Programming Language :: Python",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.10",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3 :: Only",
+  "Topic :: Security",
+  "Topic :: System :: Networking",
+]
+dependencies = [
+  "httpx>=0.27",
+]
+
+[project.optional-dependencies]
+dev = [
+  "pytest>=8.0",
+  "pytest-httpx>=0.30",
+]
+
+[project.urls]
+Homepage = "https://github.com/ehsanhajian/nodeprobe"
+Repository = "https://github.com/ehsanhajian/nodeprobe"
+Issues = "https://github.com/ehsanhajian/nodeprobe/issues"
+Releases = "https://github.com/ehsanhajian/nodeprobe/releases"
+
+[project.scripts]
+nodeprobe = "nodeprobe.cli:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.setuptools.package-data]
+nodeprobe = ["data/*.json"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+pythonpath = ["src"]

nodeprobe-0.1.3/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

nodeprobe-0.1.3/src/nodeprobe/__init__.py

@@ -0,0 +1,3 @@
+"""Nodeprobe EVM RPC security scanner."""
+
+__version__ = "0.1.3"

nodeprobe-0.1.3/src/nodeprobe/__main__.py

@@ -0,0 +1,4 @@
+from nodeprobe.cli import main
+
+if __name__ == "__main__":
+    raise SystemExit(main())

nodeprobe-0.1.3/src/nodeprobe/chains.py

@@ -0,0 +1,87 @@
+"""EVM chain registry — any chain ID is accepted; names from Chainlist when known."""
+
+from __future__ import annotations
+
+import json
+from dataclasses import dataclass
+from functools import lru_cache
+from importlib import resources
+
+
+@dataclass(frozen=True)
+class ChainInfo:
+    chain_id: int
+    name: str
+    short_name: str
+    is_testnet: bool = False
+    listed: bool = True
+
+
+# Backward-compatible alias used by older imports/tests.
+SUPPORTED_CHAINS: dict[int, ChainInfo] = {}
+
+
+class UnsupportedChainError(ValueError):
+    """Deprecated: scans no longer abort on unknown chains.
+
+    Kept so older callers that catch this exception continue to work.
+    """
+
+    def __init__(self, chain_id: int | None, message: str | None = None):
+        self.chain_id = chain_id
+        super().__init__(
+            message or f"Unsupported or unknown chain ID: {chain_id}."
+        )
+
+
+@lru_cache(maxsize=1)
+def _load_registry() -> dict[int, ChainInfo]:
+    text = resources.files("nodeprobe").joinpath("data/chains_mini.json").read_text(
+        encoding="utf-8"
+    )
+    raw = json.loads(text)
+    registry: dict[int, ChainInfo] = {}
+    for key, value in raw.items():
+        chain_id = int(key)
+        registry[chain_id] = ChainInfo(
+            chain_id=chain_id,
+            name=str(value["name"]),
+            short_name=str(value.get("short_name") or f"chain-{chain_id}"),
+            is_testnet=bool(value.get("is_testnet")),
+            listed=True,
+        )
+    # Populate alias for introspection / tests that inspect the map.
+    SUPPORTED_CHAINS.clear()
+    SUPPORTED_CHAINS.update(registry)
+    return registry
+
+
+def known_chains() -> dict[int, ChainInfo]:
+    return dict(_load_registry())
+
+
+def resolve_chain(chain_id: int) -> ChainInfo:
+    """Resolve any EVM chain ID. Unknown IDs get a generic name and continue scanning."""
+    if not isinstance(chain_id, int):
+        raise TypeError(f"chain_id must be int, got {type(chain_id)!r}")
+    if chain_id < 0:
+        raise ValueError(f"chain_id must be non-negative, got {chain_id}")
+    info = _load_registry().get(chain_id)
+    if info is not None:
+        return info
+    return ChainInfo(
+        chain_id=chain_id,
+        name=f"Chain {chain_id}",
+        short_name=f"chain-{chain_id}",
+        is_testnet=False,
+        listed=False,
+    )
+
+
+def parse_hex_or_int(value: str | int) -> int:
+    if isinstance(value, int):
+        return value
+    text = str(value).strip()
+    if text.startswith("0x") or text.startswith("0X"):
+        return int(text, 16)
+    return int(text)