security-toolchain
node://exposure-scan
security-toolchain is a personal Bash CLI I am building for external attack-surface monitoring. Component 1 is exposure-scan: given a host I am authorized to check, it combines port discovery, a second vulnerability pass, and a best-effort hosting-provider guess, then writes structured JSON plus a human-readable summary.
The useful part is the diff. Each run compares against the last scan of the same target so a newly opened sensitive port is an alert, not a footnote. An optional identity check tries to confirm the host actually belongs to the domain you think it does — shared or NAT'd IPs lie.
It is written for macOS bash 3.2 on purpose (no associative arrays) so it survives cron and launchd. Later components are planned for AD posture and log correlation. This is a lab and client-engagement tool, not a public scanner.