FrancescoStabile/numasec

Orchestrates 21 Python security scanners via JSON-RPC bridge from a TypeScript terminal UI, following PTES methodology to chain multi-stage attacks (e.g., leaked credentials → SSRF → cloud metadata exfiltration). Maintains a 34-template knowledge base of detection patterns and exploitation techniques per target environment to ground reasoning and avoid hallucination. Outputs findings in SARIF, HTML, and JSON with CVSS 3.1 scores, CWE/OWASP/MITRE mappings, and remediation guidance—compatible with GitHub Code Scanning and any LLM via OpenAI-compatible APIs.

Available on PyPI.