Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Hardware report of the computer including components, testing, benchmarking, erasing, and installing an OS.
Create a hardware report (JSON) of your computer including components, serial numbers, testing (SMART and stress test), benchmarking (sysbench), erasing (using certified tools and well-known standards), and installing an OS.
You parametrize Workbench to execute the actions you want and then runs without user interaction, generating a human and machine friendly report in JSON. This report can be uploaded to the IT Asset Management System Devicehub. Check example reports here, here, and here.
Workbench can be used in an USB or CD, or even over the network through PXE, specially useful when erasing and installing OSes or working with many computers.
This repository is the stand-alone core version of Workbench.
Workbench uses several well-known Linux packages to perform each action, avoiding re-inventing the wheel. It is used professionally by refurbishers and regular companies to register, prepare, and track their devices, and has great emphasis in data correctness. Workbench is free software from eReuse.org.
Workbench is developed and tested in Debian 9, and it should work in any Debian based OS, even in any Linux as long as the OS has the debian packages listed below.
cat debian-requirements.txt | sudo xargs apt install -y
.sudo pip3 install ereuse-workbench --pre -U
Note that you need to install this as sudo, as the software can only be run with root due to the sensitive tools it uses.
Execute Workbench through the CLI or directly in Python.
To use the CLI check the help for more info: sudo erwb --help
From a python file you can:
from ereuse_workbench.workbench import Workbench
erwb = Workbench() # Check the docs of this class for more info
erwb.run()
pip3 install -e .[test] -r requirements.txt
.python3 setup.py test
.Note that you do not need to be root to execute tests, and that they can be executed in Mac and Windows, as they do not use any of the system tools, but stubs.
We want to overcome them in the future :-)
FAQs
Hardware report of the computer including components, testing, benchmarking, erasing, and installing an OS.
We found that ereuse-workbench demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.