elouzi09/legit-lab repository overview

⁠Legit-Lab 🔎

Fast, open-source security analysis for URLs and PDF documents.

Legit-Lab combines static heuristics, machine learning, threat intelligence APIs, and optional AI-powered summaries to help identify suspicious content and speed up everyday security triage.

⁠Features

• 🔗 URL Analysis: Detect suspicious patterns and potential typosquatting.
• 📄 PDF Analysis: Inspect JavaScript, automatic actions, embedded files, and internal URLs.
• 🛡️ Threat Intelligence: Optional integrations with VirusTotal, URLhaus, and Google Safe Browsing.
• 🤖 Machine Learning & AI: URL risk estimation and optional summaries using Gemini or DeepSeek.
• 🌍 Multilingual Reports: French, English, and Arabic.
• ⚡ No API keys required: Static analysis, ML, and template-based reports remain available without external credentials.

⁠Quick Start

Pull the image:

docker pull elouzi09/legit-lab:latest

Run the container:

docker run --rm -p 5000:5000 elouzi09/legit-lab:latest

Open http://localhost:5000⁠ in your browser.

⁠API Configuration

External API keys are optional. Configure supported integrations through the application's settings page or environment variables. See the GitHub repository⁠ and its .env.example file for configuration details.

Never include real API keys in a public image or repository.

⁠Security Notice

Legit-Lab is a triage aid, not a guarantee that a URL or file is safe. External services may receive submitted data. Avoid submitting confidential documents or sensitive URLs without authorization. The built-in Flask server is intended for local or trusted-network use; do not expose it directly to the public internet without appropriate security controls.

⁠Open Source

Contributions, bug reports, and feature suggestions are welcome. Help improve detection, reporting, and integrations.

Docker Hub: elouzi09/legit-lab