Home

WebScripts

Description

This package implements a web server to run scripts or executables from the command line and display the result in a web interface.

Goals

Create a safe, secure and easy way to share console scripts and scripting environnments with your team or people without IT knowledge.

• Secure
  • SAST - Static Application Security Testing using bandit, semgrep, CodeQL and Pycharm Security.
  • DAST - Dynamic Application Security Testing using ZAP (Baseline && full scan), nuclei and some Kali Linux tools.
  • Web pentest using Kali Linux Web tools and my little experience in Web Hacking. Tools are skipfish, nikto, dirb and whatwheb.
  • Centralization of logs (using Syslog on Linux and Event Viewer on Windows)
  • Easy to update and patch security issues on Linux (critical functions are implemented in Standard Library and are updated with your system) (WebScripts does not require any python package)
  • Easy to deploy securely
    • Apache and mod_wsgi
    • Nginx as HTTPS proxy
  • Easy to configure securely (read the documentation)
    • INI/CFG syntax
    • JSON syntax
  • Unittest

Installation

Requirements

This package require:

• python3
• python3 Standard Library

Optional on Windows:

• pywin32 (to centralize logs in Event Viewer)

Linux

python3 -m pip install WebScripts

Windows

python -m pip install WebScripts

Optional

To centralize logs in Event Viewer.

python -m pip install pywin32

Start the server

You can now start the server with this simple command:

WebScripts

First connection

To log in for the first time, use the Admin account (username: Admin, password: Admin). I recommend changing the password immediately. The Admin account is restricted on 127.0.*,192.168.*,172.16.*,10.* by default.

License

Licensed under the GPL, version 3.