DjangoSecurityHunter
CLI tool, detects misconfig, XSS, SQL injection risks & More
What it does
A security and performance inspector for Django & DRF. Features static analysis, config checks, N+1 query detection, and SARIF support for GitHub Code Scanning. - abu-rayhan-alif/djangoSecurityHunter
Does a similar job
all alternatives →- SESQL Explorer – Open-source reporting tool that Just Works2024 · github.com · ▲215
I have been working on SQL Explorer, an open source, Django-based reporting and query tool for (gulp!) almost ten years. It's a tool that fits just right for me and many others, and I love and use almost every day. Write SQL, share results, do some analysis, get insight. No surprises. A live demo instance is here (no login or anything required): https://demo.sqlexplorer.io/ And here's a fairly unprofessional, but very enthusiastic, video tour: https://sql-explorer.s3.amazonaws.com/Sql+Explorer+5.mp4 The UI is constrained enough that there's very little to learn,…
- DSDjango SQL Dashboard2021 · django-sql-dashboard.datasette.io · ▲204
- DCDjango CBV Inspect – A tool to help visualize Django class-based views2023 · github.com · ▲18
- MSMCP-Shield – Detect security issues in MCP servers2025 · github.com · ▲134
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
- DCDjango Control Room – All Your Tools Inside the Django AdminFeb 2026 · github.com · ▲134
Over the past year I’ve been building a set of operational panels for Django: - Redis inspection - cache visibility - Celery task introspection - URL discovery and testing All of these tools have been built inside the Django admin. Instead of jumping between tools like Flower, redis-cli, Swagger, or external services, I wanted something that sits where I’m already working. I’ve grouped these under a single umbrella: Django Control Room. The idea is pretty simple: the Django admin already gives you authentication, permissions, and a familiar interface. It can also act as an operational layer…
- WSWeb Security Scanner - Can Your Site Score a 100%?2013 · ▲7
http://webscanner.tk/quickscan/ Hi! I made this project over the couse of a week to help teach myself more about Django and web app development. I am studying computer security in school and web security is one of my passions. It is a tool that helps web developers ensure that they have implemented helpful security mechanisms like HTTPOnly flags, X-Frame-Options, etc. There are hundreds of tools that offer to scan websites for things like cross-site scripting, mySQL injection, etc. This tool simply looks for information that is available via one or two GET requests (the headers, protocols,…
More dev tools this month
the category →
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
Open-source GTM skills for technical founders
Dev tools · 30d ago · gtmcofounder.com
Launched alongside, April 2026
the whole month →
- AG
Thought the resources for GPU arch were lacking, so here we are
Life & fun · Apr 2026 · jaso1024.com
- IB
Built a ~9M param LLM from scratch to understand how they actually work. Vanilla transformer, 60K synthetic conversations, ~130 lines of PyTorch. Trains in 5 min on a free Colab T4. The fish thinks the meaning of life is food. Fork it and swap the personality for your own character.
AI · Apr 2026 · github.com
- BC
Life & fun · Apr 2026 · sam-burns.com
- IB
With social media and now AI, its important to keep the indie web alive. There are many people who write frequently. Blogosphere tries to highlight them by fetching the recent posts from personal blogs across many categories. There are two versions: Minimal (HN-inspired, fast, static): https://text.blogosphere.app/ Non-minimal: https://blogosphere.app/ If you don't find your blog (or your favorite ones), please add them. I will review and approve it.
AI · Apr 2026 · text.blogosphere.app