Skip to content

A Python-based smart contract auditing tool for Solidity using Slither, with JSON and HTML vulnerability reports.

License

Notifications You must be signed in to change notification settings

onoka-ship-it/kogwasys

Repository files navigation

🛡️ Kogwasys – Smart Contract Guardian | 智能合约卫士

Python Status License Issues Stars Last Commit

Kogwasys is a Python-powered command-line tool that protects Solidity smart contracts from critical security vulnerabilities. Built on Slither, it combines custom rule sets with trusted static analysis to detect classic and modern Web3 threats.

“Audit your contracts before hackers do.”


✨ Features

  • 🚨 Detects Reentrancy, Oracle Manipulation, Unchecked Calls, and more
  • 🔍 Supports custom rule modules for modern vulnerabilities (2025 OWASP SC Top 10)
  • 📂 Scans entire Solidity projects or individual .sol files
  • 📊 Outputs detailed terminal reports in Chinese + optional JSON and HTML formats
  • 🧩 VS Code compatible for integrated scanning workflows
  • 💡 Fully extensible – add your own static analysis rules

🚀 Quick Start

# 1. Clone the repo
git clone https://github.com/onoka-ship-it/kogwasys.git
cd kogwasys

# 2. Set up virtual environment
python3 -m venv venv
source venv/bin/activate

# 3. Install dependencies
pip install -r requirements.txt

# 4. Run a scan
kogwasys --target examples/VulnerableContract.sol

# 5. Output JSON + HTML to a custom folder
kogwasys --target examples/VulnerableContract.sol --json --html --out reports

🖼️ Example Output

Here’s what a vulnerability scan looks like in your terminal:

Kogwasys Output

Releases

No releases published

Packages

No packages published