Show HN: Blastradius – find PHP2Shell, Node, emSign or leaked tokens

Category: security

Tags: security, incident-response, vulnerability-management, cli, rust

Score: 6.3/10 (Innovation: 6, Technical: 6, Documentation: 8, Utility: 5)

Blastradius (br) is a Rust-based CLI tool that helps organizations assess their exposure to security incidents by indexing repositories, CI runs, container images, secrets, and local machines. It answers questions like where vulnerable runtimes are used, which trust stores contain compromised certificates, and which secrets need rotation after a breach, providing owners and cleanup guidance. The tool emphasizes local, read-only operation and transparency about gaps.

Target audience: security engineers, DevOps, SREs, incident responders

Repository: https://github.com/jondot/blastradius · Rust · MIT · 1 stars

View on Hacker News