
Security Fundamentals
Turtles, Clams, and Cyber Threat Actors: Shell Usage
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Created by @Almas-Ali
Learn from the official Documentation
Fronty is a frontend web framework. It is a Python library that allows you to create web pages using only Python. No HTML, CSS, or JavaScript required. But you can still use them if you want. Basic knowledge of HTML, CSS, and JavaScript is required to use Fronty.
Easy to install with pip.
pip install fronty
git clone https://github.com/Almas-Ali/fronty.git
cd fronty/examples/starter\ project
python app.py
Note: You have to install a backend server to run the project. Fronty does not provide a backend server. You can use any backend server you want. For example, you can use Flask. You can also use Fronty with Django. But you have to install Django first. For simplicity, we have used Flask in the example projects. We are woring on a backend server for Fronty. It will be available soon.
mkdir my_project
cd my_project
app.py
touch app.py
Open the file with your favorite text editor
Copy the following code and paste it in the file
from flask import Flask, request
from fronty.html import *
app = Flask(__name__)
def home(request) -> Html:
'''This is the home page view function'''
return Html(
Head(
Title('Home'),
Meta(charset='utf-8'),
Meta(name='viewport', content='width=device-width, initial-scale=1'),
),
Body(
Element(
'center',
Element(
'h1',
'Welcome to Fronty!'
),
Element(
'p',
'Fronty is a frontend web framework.'
),
)
)
)
@app.route('/')
def index() -> str:
'''This is the home page view function'''
return home(
request=request,
).render()
if __name__ == '__main__':
app.run(debug=True)
python app.py
http://127.0.0.1:5000/
Pull requests are welcome. For any changes, please open an issue first to discuss what you would like to change.
Thanks for using Fronty!
FAQs
A frontend web framework
We found that fronty demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security Fundamentals
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Security News
At VulnCon 2025, NIST scrapped its NVD consortium plans, admitted it can't keep up with CVEs, and outlined automation efforts amid a mounting backlog.
Product
We redesigned our GitHub PR comments to deliver clear, actionable security insights without adding noise to your workflow.