miiidev/blacklight-cli

Local network vulnerability scanner.

What's novel

Local network vulnerability scanner.

Code Analysis

15 files read · 4 rounds

A local network vulnerability scanner that runs nmap service detection, matches services against NVD CVEs via CPE mapping, enriches findings with EPSS/KEV data, classifies TLS weaknesses, performs web application checks (headers, exposed files, injection probes), scores hosts 0-100, and exports seve

Strengths

Clean adapter-pattern architecture with typed dataclasses throughout, thoughtful guardrails (default-deny, CIDR containment), pure TLS classification module, proper NVD rate limiting with disk caching, and meaningful tests that mock at the right boundaries and verify edge cases like CPE normalization and guardrail blocking.

Weaknesses

The CPE mapping is a static ~60-entry dictionary that won't cover all services (though unmapped services are gracefully skipped), and web injection detection is limited to error-based signature matching (no blind/time-based detection), which is appropriate for a low-noise scanner but limits coverage.

Score Breakdown

Innovation

3 (25%)

Craft

49 (35%)

Traction

0 (15%)

Scope

52 (25%)

Signal breakdown

Innovation

Not Fork+1

Code Novelty+1

Concept Novelty+0

Craft

Ci+5

Tests+8

Polish+2

Releases+0

Has License+0

Code Quality+26

Readme Quality+15

Recent Activity+4

Structure Quality+5

Commit Consistency+2

Has Dependency Mgmt+5

Traction

Forks+0

Stars+0

Hn Points+0

Watchers+0

Early Traction+0

Devto Reactions+0

Community Contribs+0

Scope

Commits+8

Languages+5

Subsystems+10

Bloat Penalty+0

Completeness+6

Contributors+0

Authored Files+15

Readme Code Match+3

Architecture Depth+7

Implementation Depth+8

Evidence

Commits

128

Contributors

Files

Active weeks

TestsCI/CDREADMELicenseContributing

Repository

Language

Python

Stars

Forks

License

—