konfusio. Konfusio is a multi-ecosystem Dependency Confusion hunting tool for Bug Bounty hunters and security researchers. It crawls targets, discovers dependency manifests automatically, extracts real package names, checks the correct public registry for each ecosystem, and highlights realistic Dependency Confusion risks.

github.com/robotshell/konfusio

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.