SERVER-SIDE MALWARE TRIAGE · COMING SOON

Lion Exploit Scanner

Catch web shells and backdoors before they become a problem — with a scanner that touches nothing without your say-so.

Notify me at launch → Features
Lion Exploit Scanner — Rules with severity and description
Rules with severity and description

Real screens of the software, shown with demo data.

Triage, not guesswork

LES rates each finding as critical or high and records the file’s path, size and SHA-256. Your team knows where to start when a server has dozens of suspicious files.

The scanner filters PHP/JS extensions, has a size limit, supports ignore lists, does not follow directory symlinks and notices when a file changes mid-scan. Exit codes 0/1/2 make it easy to use from scripts and monitoring.

FEATURES

What is included

🐍

Pure Python 3

Standard library only, no dependencies.

🎯

Severity levels

Critical and high for quick prioritisation.

🙈

Ignore lists

Skip known-safe files.

🔢

Exit codes

0 clean, 1 findings, 2 errors.

🗃️

SQLite history

Every scan and finding is recorded.

🔐

Verified quarantine

Copy, fsync, SHA-256, then unlink.

Who it is for

FAQ

Frequently asked questions

Does it scan inside archives?

Not yet. The current version scans PHP/JS files directly on disk.

Does it need a database?

It uses a local SQLite file for history, with no separate server.

Keep me posted about Lion Exploit Scanner →