[{"data":1,"prerenderedAt":371},["ShallowReactive",2],{"project-20921962":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":34,"aspects":35,"strip":44,"post_text":45,"what":46,"said":67,"maker_in_thread":211,"shape":214,"grid":219,"attempts":329,"same_week":334,"maker_shows":31,"maker_hidden":364,"reader_version":365,"card":366},"20921962","SecAlerts","Enter your URL and view CVEs affecting your stack over last 6 months","title","Show HN: Enter your URL and view CVEs affecting your stack over last 6 months","https:\u002F\u002Fsecalerts.co\u002Fsecurity-audit","secalerts.co","GiulioS",1568060089,2019,144,48,304,2195,14,"notable","security_privacy","vulnerability alerts","web_app",[24,25,26,27],"cve alerts","vulnerability scanner","web stack detection","security audit","roasted",-0.5,{"positive":31,"neutral":32,"mixed":31,"critical":33},1,7,13,22,{"performance":36,"execution":39,"privacy":41,"idea":43},{"positive":37,"critical":38},0,2,{"positive":31,"critical":40},6,{"positive":37,"critical":42},3,{"positive":37,"critical":38},[31,31,31,31,42,31,31,42,42,31,42,31,42,31,31,37,37,37,37,37,37,37,37,37,37,37,42,37,42,37,37,37,31,31,42,37,37,37,37,37],null,{"problem":47,"audience":45,"pricing":45,"motivation":56,"time_to_build":45,"stack":60,"openness":65,"stage":66,"team_size":65},{"value":48,"source":49,"evidence":50},"Shows known CVEs affecting the software a website runs, detected from its URL","maker",[51,53],{"id":52},"post",{"id":54,"by":11,"text":55},"20922729","Creator here. We built this using Wappalyzer to detect the software given a URL and match it against our database of CVEs and thought it might be a fun little tool.",{"value":57,"source":49,"evidence":58},"Described as a fun little tool",[59],{"id":54,"by":11,"text":55},[61],{"value":62,"source":49,"evidence":63},"Wappalyzer (software detection)",[64],{"id":54,"by":11,"text":55},"unknown","launched",{"praise":68,"objections":77,"requests":135,"questions":162,"alternatives":171},[69],{"value":70,"source":71,"evidence":72},"Detected stack and a critical CVE for coop.co.uk","commenter",[73],{"id":74,"by":75,"text":76},"20922341","paulfurley","The first URL I entered (coop.co.uk) was actually pretty awesome, it detected Varnish and showed a critical CVE from last week. That’s cool. I hope that if you subscribe, the…",[78,97,106,117,128],{"value":79,"source":71,"evidence":80},"Publishing a site's stack makes it easier to attack",[81,85,89,93],{"id":82,"by":83,"text":84},"20922254","meesterdude","i don't need to provide my (potentially vulnerable) production URL to whoever-you-might-be in order to identify the last 6 months of vulnerabilities - I can just google for that.…",{"id":86,"by":87,"text":88},"20922565","adtac","This is the textbook definition of security by obscurity.",{"id":90,"by":91,"text":92},"20930569","not_a_cop75","Part of securing your stack is not sharing with everyone exactly what you have, or do you not study security at all?",{"id":94,"by":95,"text":96},"20922688","mellosouls","This is a nice addendum to the \"Let Us Identify Your Stack\" style web services tho I guess some of them might already provide this. It does have the somewhat negative effect of…",{"value":98,"source":71,"evidence":99},"Privacy concern about collecting IPs and stack data",[100,103],{"id":101,"by":91,"text":102},"20922898","Finally, a place that can gather IP addresses and associate them to specific security products to have them hacked later. Just what I've been waiting for.",{"id":104,"by":91,"text":105},"20930584","It's not you, but the implicit idea of trust. How are three people I know nothing about going to give me better results than a known name? Best of luck establishing yourselves…",{"value":107,"source":71,"evidence":108},"Detection is inaccurate (Apache, Ruby on Rails misidentified)",[109,113],{"id":110,"by":111,"text":112},"20924657","wilsonthewhale","My static site running on OpenBSD 6.5 httpd gets identified as Apache ¯\\_(ツ)_\u002F¯",{"id":114,"by":115,"text":116},"20928045","KrishnaAnaril","My Angular site is getting detected as Ruby on Rails :)",{"value":118,"source":71,"evidence":119},"Fails to detect many servers such as lighttpd",[120,124],{"id":121,"by":122,"text":123},"20923209","swiley","I pointed it at my lighttpd server and all I got was \"cannot detect software\" or so.",{"id":125,"by":126,"text":127},"20924977","jamessteel","Wasn’t able to detect what software my site use, my server name was disabled.",{"value":129,"source":71,"evidence":130},"API overloaded and returning errors",[131],{"id":132,"by":133,"text":134},"20922802","r1ch","Looks like it's overloaded - HTTP\u002F502 on the API here.",[136,143,147,155],{"value":137,"source":71,"evidence":138},"Detect by library or framework, not platform",[139],{"id":140,"by":141,"text":142},"20923319","ComputerGuru","It’s a pretty poor implementation that is basically matching on the lowest common denominator, by platform rather than by library or framework. An ASP.NET website is fully…",{"value":144,"source":71,"evidence":145},"Crawl subdirectories to find multiple technologies",[146],{"id":140,"by":141,"text":142},{"value":148,"source":71,"evidence":149},"Periodic rescanning and alerts",[150,151],{"id":74,"by":75,"text":76},{"id":152,"by":153,"text":154},"20923183","mrlucax","Is there an open source alternative that could be self-hosted and configured to run automated and periodical checks?",{"value":156,"source":71,"evidence":157},"Open source release",[158],{"id":159,"by":160,"text":161},"20926210","fnigi","Is this released open-source ?",[163,167],{"value":164,"source":71,"evidence":165},"Is it open source?",[166],{"id":159,"by":160,"text":161},{"value":168,"source":71,"evidence":169},"Is there a self-hosted open source alternative?",[170],{"id":152,"by":153,"text":154},[172,183,190,204],{"value":173,"source":71,"evidence":174},"Wappalyzer and browser extensions",[175,179],{"id":176,"by":177,"text":178},"20923267","dahfizz","There are browser extensions that do this same thing. It's pretty trivial to do.",{"id":180,"by":181,"text":182},"20927157","oriettaxx","https:\u002F\u002Fwww.whatruns.com\u002F not so precise must say",{"value":184,"source":71,"evidence":185},"Shodan",[186],{"id":187,"by":188,"text":189},"20923920","yjftsjthsd-h","Wait until you hear about shodan...",{"value":191,"source":71,"evidence":192},"OWASP ZAP, Nikto, Metasploit",[193,197,201],{"id":194,"by":195,"text":196},"20924916","smcleod","While not a web or automated option - if you want to run a quick crawl and scan on your apps you could try OWASP ZAP, it also has quite a few handy plugins -…",{"id":198,"by":199,"text":200},"20924556","Godel_unicode","Metasploit isn't the best choice for webapps, you probably want nikto or similar. Here's the owasp list: https:\u002F\u002Fwww.owasp.org\u002Findex.php\u002FCategory:Vulnerability_Scanning_Tools",{"id":202,"by":177,"text":203},"20923232","Metasploit? You don't even need to host it (why are we so obsessed with making everything a website?)",{"value":205,"source":71,"evidence":206},"masscan",[207],{"id":208,"by":209,"text":210},"20923650","nighthawk454","In fact, there's a tool that claims to scan the internet in 6 minutes: https:\u002F\u002Fgithub.com\u002Frobertdavidgraham\u002Fmasscan",{"comments":31,"answered":37,"key":212},[213],{"id":54,"text":55},{"commenters":215,"max_depth":216,"maker_replies":31,"first_comment_mins":217,"lifespan_hours":218},34,5,27,49,[220,222,224,227,228,230,232,233,236,239,243,245,247,251,252,255,257,260,261,265,268,272,275,276,278,280,283,286,288,291,293,294,296,298,300,301,304,305,306,308,310,313,315,318,320,321,324,326],[140,37,31,221,141,37],"project\u002Fcritical\u002Fperformance",[110,31,31,223,111,37],"project\u002Fcritical\u002Fexecution",[225,31,31,223,226,37],"20926745","AndyMcConachie",[114,31,31,223,115,37],[54,38,37,229,11,31],"maker\u002Fneutral\u002Fidea",[159,38,42,231,160,37],"project\u002Fneutral\u002Fnone",[121,42,31,223,122,37],[234,42,31,223,235,37],"20923982","rubbingalcohol",[94,237,42,238,95,37],4,"project\u002Fmixed\u002Fprivacy",[240,237,42,241,242,37],"20922786","project\u002Fneutral\u002Fperformance","louisstow",[176,237,31,244,177,37],"project\u002Fcritical\u002Fidea",[180,237,37,246,181,37],"other\u002Fneutral\u002Fnone",[248,216,42,249,250,37],"20925687","project\u002Fneutral\u002Fexecution","babuskov",[132,40,31,221,133,37],[253,40,42,254,242,37],"20922908","maker\u002Fneutral\u002Fperformance",[101,32,31,256,91,37],"project\u002Fcritical\u002Fprivacy",[258,32,42,259,242,37],"20922967","maker\u002Fneutral\u002Fprivacy",[104,32,31,256,91,37],[262,32,37,263,264,37],"20923008","commenter\u002Fneutral\u002Fnone","lone_haxx0r",[266,32,37,267,91,37],"20930604","commenter\u002Fneutral\u002Fprivacy",[269,32,37,270,271,37],"20923156","commenter\u002Fcritical\u002Fidea","jdnenej",[273,32,37,263,274,37],"20923565","Quekid5",[208,32,37,246,209,37],[277,32,37,263,274,37],"20923797",[279,32,37,246,91,37],"20930638",[281,32,37,246,282,37],"20941913","kayfox",[284,32,37,285,91,37],"20930533","commenter\u002Fcritical\u002Fprivacy",[287,32,37,267,274,37],"20944738",[289,32,37,285,290,37],"20923175","saagarjha",[292,32,37,246,126,37],"20925120",[90,32,37,285,91,37],[187,32,42,295,188,37],"project\u002Fneutral\u002Fidea",[297,32,37,263,91,37],"20930553",[152,299,42,295,153,37],8,[202,299,37,263,177,37],[302,299,37,263,303,37],"20924472","kortilla",[198,299,37,263,199,37],[194,299,37,263,195,37],[125,307,31,223,126,37],9,[82,309,31,256,83,37],10,[311,309,31,244,312,37],"20922311","bogwog",[74,309,216,314,75,37],"project\u002Fpositive\u002Fexecution",[316,309,37,267,317,37],"20922337","landr0id",[319,309,37,267,75,37],"20922366",[86,309,37,285,87,37],[322,309,37,285,323,37],"20922746","tptacek",[325,309,37,285,271,37],"20923179",[327,309,37,267,328,37],"20926927","heavenlyblue",[330,333],{"id":331,"t":332,"points":40,"comments":38},"20863634",1567483561,{"id":4,"t":12,"points":14,"comments":15},[335,340,345,350,355,360],{"id":336,"name":337,"points":338,"category":339},"20923792","augmented-ui",775,"dev_tools",{"id":341,"name":342,"points":343,"category":344},"20929801","3dforreddit",720,"consumer_social",{"id":346,"name":347,"points":348,"category":349},"20914236","Senior Engineer's CheckList",662,"learning_science",{"id":351,"name":352,"points":353,"category":354},"20903558","Soso",233,"infrastructure",{"id":356,"name":357,"points":358,"category":359},"20927585","tweetjobs",189,"productivity",{"id":361,"name":362,"points":363,"category":349},"20929774","The Whole Code Catalog",156,false,"v2",{"id":367,"name":5,"line":6,"ai":364,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":368,"maker":11,"domain":10,"tier":19,"attempts":38,"strip":369,"url":9,"mix":370,"praise":70,"objection":79,"sub":21},20921962,[24,25,26,27],"1111311331313110000000000030300011300000",[31,32,31,33],1794036580716]