Security Checker

Abstract

1. Introduction

The Enlightn Security Checker is a command line tool that checks if your application uses dependencies with known security vulnerabilities. It uses the Security Advisories Database.

2. Objective

A PHP dependency vulnerabilities scanner based on the Security Advisories Database.

This project demonstrates how PHP can be applied to a real-world Cybersecurity & Ethical Hacking problem.

4. Technology Stack

5. System Requirements

General requirements for this technology stack — check the README for exact versions.

• PHP 7.4+ with a web server (XAMPP / WAMP / LAMP)
• MySQL / MariaDB
• phpMyAdmin (optional)
• Git (to clone the repository)

6. Installation & Setup

git clone https://github.com/enlightn/security-checker.git
cd security-checker

1. You may install the Enlightn Security Checker with Composer globally, for use with multiple projects:
2. You may also install the Enlightn Security Checker in your project as a dev dependency using Composer:
3. Instead of installing via Composer, you may also download the security-checker.phar file. Then, in the commands below you can replace security-checker with security-checker.phar.

composer global require enlightn/security-checker

composer require --dev enlightn/security-checker

php security-checker security:check /path/to/composer.lock

php vendor/bin/security-checker security:check /path/to/composer.lock

Full setup instructions are in the project README.

7. Future Enhancements

Suggested extensions you can add to make this your own project.

• Add logging and alert notifications (email / Telegram)
• Write a threat model document for the tool
• Package it with Docker for safe lab testing

8. Viva / Review Questions

Common questions examiners ask for projects in this domain.

1. Which threat or attack does this project defend against?
2. What detection or protection technique is used and what are its limits?
3. How are false positives and false negatives handled?
4. Which cryptographic algorithms or security standards are involved?
5. What legal and ethical rules apply when testing a tool like this?

9. Source Code & License

This project is developed by enlightn and published on GitHub under the MIT License. Please follow the license terms and credit the original author when you use or modify this code.