Download the PHP package nawasara/secscan without Composer

On this page you can find all versions of the php package nawasara/secscan. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Example code of nawasara/secscan

Informations about the package secscan

nawasara/secscan

Security threat detection & response for the Nawasara superapp. Two independent sources of signal feed one dashboard:

  1. Database scanner — reads the MySQL databases already monitored by nawasara/database-monitor (read-only) for indicators of compromise on hosted sites (WordPress in particular).
  2. Host agents (nawasara-agent) — a Go binary installed on each server that tails logs, watches SSH, and scans the filesystem for webshells / backdoors, reporting incidents + findings back to the dashboard.

Everything is detect + alert — the database scanner never writes to OPD databases. Findings get a confidence score (0-100) and severity, a triage workflow (open / acknowledged / false-positive / resolved), a dashboard, and alerts via nawasara/alerting.

Dashboard pages

Page Route Isi
Dashboard /nawasara-secscan/dashboard Ringkasan: agent online, incident kritis, temuan mendesak
Temuan Website /nawasara-secscan/findings Temuan dari database scanner (judol/malware/defacement) + triage
Incidents /nawasara-secscan/incidents Insiden dari agent (SSH brute-force, exploit chain, scanner bot)
Agents /nawasara-secscan/agents Daftar agent terpasang + detail (scan findings, command queue)
IP Timeline /nawasara-secscan/ip/{ip} Semua insiden dari satu IP sumber

Permissions: secscan.view, secscan.finding.triage, secscan.agent.view, secscan.agent.scan, secscan.agent.command.

Setup (database scanner)

  1. nawasara/database-monitor harus dikonfigurasi (Vault group database-monitor) — secscan pakai ulang koneksi read-only-nya.

  2. Seed permission:

  3. Scan berjalan otomatis (scheduler). Trigger manual dari tombol "Pindai sekarang" di dashboard, atau:

Panduan Install nawasara-agent

Agen keamanan yang dipasang di tiap server target. Memantau log (nginx, SSH, Laravel), mendeteksi serangan (brute-force, exploit, scanner bot), dan memindai file berbahaya (webshell/backdoor), lalu melaporkan ke dashboard.

Butuh: akses root/sudo · Linux (amd64/arm64) · ± 3 menit

Cara cepat — satu baris (direkomendasikan)

Jalankan di server target sebagai root:

Skrip ini otomatis:

  1. Unduh binary sesuai arsitektur (amd64/arm64)
  2. Daftar ke dashboard → dapat agent_id + api_key otomatis
  3. Tulis config (/etc/nawasara-agent/config.yaml, chmod 600)
  4. Pasang service systemd (nawasara-agent run --config …)
  5. Jalankan service

Tidak perlu langkah manual. Output sukses:

Sudah pernah pasang? Jika /etc/nawasara-agent/config.yaml sudah ada, skrip melewati pendaftaran (kredensial lama dipertahankan). Untuk daftar ulang dari awal, hapus config dulu:

Verifikasi

Lalu buka Dashboard → Security Scan → Agents. Server muncul online dalam ± 30 detik (interval heartbeat).

Konfigurasi

Config ditulis otomatis ke /etc/nawasara-agent/config.yaml. Sentuh hanya untuk menyesuaikan path log atau menyalakan pemindai file.

Field Arti
dashboard_url Alamat dashboard Nawasara (terisi otomatis)
agent_id ID unik agen (dapat otomatis saat pendaftaran)
api_key Kunci auth (nwa_…, dapat otomatis, disimpan chmod 600)
heartbeat_interval Interval heartbeat (default 30s)
plugins.enabled Kolektor aktif: nginx, ssh, laravel
plugins.laravel.log_paths Daftar path log Laravel yang dipantau
scanner.enabled Pemindai file webshell/backdoor (default false)
scanner.scan_interval Interval scan (default 6h)
scanner.web_dirs Direktori web yang dipindai saat scanner aktif
scanner.watch_paths Path yang dipantau perubahan integritas (mis. .env, /etc/nginx)

Struktur config (contoh):

Menyalakan pemindai file (Fase 3): edit config → scanner.enabled: true → sesuaikan web_dirs & watch_paths → restart:

Cara manual (kalau curl | bash dilarang kebijakan server)

1. Unduh binary (ganti amd64 → arm64 untuk server ARM):

2. Daftarkan agen (catat agent_id + api_key — api_key hanya muncul sekali):

3. Tulis config /etc/nawasara-agent/config.yaml — tempel agent_id/api_key dari langkah 2, ikuti struktur di atas.

4. Buat service systemd /etc/systemd/system/nawasara-agent.service. ⚠️ ExecStart wajib pakai subcommand run:

5. Aktifkan & jalankan:

Pemecahan masalah

🔴 Skrip berhenti "Registration failed" — endpoint pendaftaran tak terjangkau (firewall / tantangan bot Cloudflare memblokir curl dari VM). Uji manual:

Harus 201. Kalau 403/timeout → minta admin membuka jalur /agent/* dari IP server ini di WAF Cloudflare.

🔴 Log terus "HTTP 403, buffering" — laporan ditolak; buffer lama menyimpan payload gagal. Bersihkan buffer lalu restart:

Kalau masih 403, sumbernya bukan di agen — hubungi admin dashboard untuk cek gating /api/agent/*.

🟠 status=203/EXEC saat start — ExecStart tanpa subcommand run. Pastikan barisnya … nawasara-agent run --config …, lalu:

🟠 Binary hanya beberapa byte / "Not Found" — unduhan mengembalikan halaman error. Cek ukuran (harus belasan MB):

Kalau kecil → repo release belum publik atau tag rilis salah. Unduh ulang setelah admin mengonfirmasi release tersedia.

Checklist akhir

Agent binary release

Binary di-build via GitHub Actions (release.yml) saat push tag ke repo nawasara/agent (linux/amd64 + linux/arm64). Dashboard menyajikan:

Repo release harus public agar download asset tak 404.

Roadmap

All versions of secscan with dependencies

PHP Build Version
Package Version
Requires php Version ^8.1
ext-pdo Version *
illuminate/support Version ^10.0|^12.0
spatie/laravel-permission Version ^6.0
nawasara/ui Version *
nawasara/sync Version *
nawasara/vault Version *
nawasara/alerting Version *
nawasara/notification Version *
nawasara/cloudflare Version *
nawasara/database-monitor Version *
nawasara/registry Version *
nawasara/auth-primitives Version *
livewire/livewire Version ^3.0
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package nawasara/secscan contains the following files

Loading the files please wait ...