Overview
LeakScope is an external security scanner that looks for exposed issues from the public internet without needing credentials.
Problem
Security reviews are often periodic and manual. Public assets, exposed configuration, and access-control mistakes can stay live for too long because nobody is checking them continuously.
Approach
I focused on recurring signals in modern web apps:
- leaked secrets in bundled assets
- weak authorization around public endpoints
- JWT handling mistakes
- accidental exposure through configuration drift
The scanner is split into a few focused stages:
- collection of public assets and endpoints
- normalization and fingerprinting of findings
- rule-based analysis for auth and exposure issues
- report generation with remediation context
Result
The output is a scanner that gives teams evidence, not just alerts, so findings are easier to act on.