Vulntotal browser extension

[AyanSinhaMahapatra]

Idea: @keshav-space

Implement a firefox/chrome browser extension which would run vulntotal on the client side, and query the vulneribility datasources for comparing them. The input will be a PURL, similarly as vulntotal.

[keshav-space]

Vulntotal is written in Python, so the goal is to use python implementation and run it within a browser extension, while providing a basic user interface.

How to run python in the browser?

Here are a few tools that we could use to run Python in a browser:

• https://github.com/pyscript/pyscript
• https://github.com/pyodide/pyodide
• https://github.com/indygreg/PyOxidizer
• https://github.com/brython-dev/brython
• https://github.com/pyjs/pyjs

[Pushpit07]

This sounds like a pretty useful and interesting project that I'd definitely be interested to pursue for GSOC. I was going through the tools that can be used to run Python in the browser and have some mixed thoughts about what to use. @AyanSinhaMahapatra @keshav-space I would like to hear your thoughts on what you think would be a better tool to move forward with.

[maheshkasabe]

Hey @keshav-space @pombredanne @TG1999

I'm Mahesh Kasbe, eager to join this project for the GSoC cohort. In 2023, I successfully completed GSoC with NRNB, enhancing their DevOps Pipeline. Additionally, I contributed a CLI tool to the OpenKruise project during the Linux Foundation Mentorship program, merging it into the Argocd repository.

With experience in Python and penetration testing, I'm well-equipped for this project. Could you please confirm the primary mode of communication? I'm keen to start drafting my proposal and discussing ideas with the team.

[keshav-space]

Thanks for showing interest, @maheshkasabe. The primary mode of communication is through the matrix channel; details can be found here: https://github.com/nexB/aboutcode/wiki/GSOC-2024#contact. Additionally, we hold community calls on Mondays at 16:00 UTC; details are available here: https://github.com/nexB/aboutcode/wiki/MeetingMinutes.

I noticed you're also a mentor for @nrnb. However, it seems that GSoC doesn't allow participation both as a mentor and a contributor simultaneously. See the GSoC FAQs https://developers.google.com/open-source/gsoc/faq#can_i_participate_in_gsoc_as_both_a_mentor_and_a_gsoc_contributor.

[malikrafsan]

Hi AboutCode Community, my name is Malik Akbar Hashemi Rafsanjani, a final year computer science student from Indonesia (Bandung, Institute of Technology) 👋👋 I am very excited to contribute to this project for Google Summer of Code (GSoC) 2024.

I have several experiences with creating browser extensions and programming using Python as well, especially for web development. I am very excited to contribute to this project and I believe I am qualified for this project. Is there anything you want me to do first? In the meantime, I will try some of the tools that we could use to run Python in a browser, that @keshav-space has mentioned and create some kind of MVP. Thank you!

---

Here is my profile GitHub: http://github.com/malikrafsan Personal Website: https://site.malikrafsan.tech/ Linkedin: https://www.linkedin.com/in/malik-rafsanjani/ Email: malikakbarrafsan@gmail.com Resume: https://drive.google.com/file/d/1Y6hbJb7PhFKJV4yw4BVGk_ZUowybpsZe/view PPT Profile: https://docs.google.com/presentation/d/1W0UqpdHsrQ8qNBQ_XLc_EVJE9ruEVOK330UHpGhfJ3s/edit

[malikrafsan]

Hi @keshav-space 👋

Recently I created a simple Chrome extension using Python (PyScript and Pyodide) for calculating simple addition and subtraction numbers using Python. This project also provides REPL for users to play with Python script in the web extension. You can check it here https://github.com/malikrafsan/python-web-extension

I would very much appreciate for your feedback! Can you please share where to continue next? I am very excited to contribute to this project, thank you so much!

https://github.com/nexB/vulnerablecode/assets/77711133/078e6c11-9b86-4c00-b3f4-2c24dfa6dbf6

[snehanemadi]

Hi, This is Sneha, I graduated from PES University and I'm currently working at VMware. I have worked on company projects in python and I have good knowledge on Computer network Security and Information Security as i have done hands on lab exercises of performing attacks as part of the courses.

I'm new to open source, really excited to work on this project in GSoC 24. could you please let me know if i can start from fixing any bugs.

Thanks !

[malikrafsan]

Hi, regarding my progress, you can find the current implementation of mine here. This will be a temporary repository to host the codes as we haven't discussed the best project structure for this project. Thank you!

https://github.com/malikrafsan/vulnerablecode/blob/main/vulntotal-extension