Apppublic

LZ-SG/vuln-scanner

sourceHugging Faceupdated 3mo agoView on Hugging Face

0likes

App README

VulnScanner - Lightweight Web Vulnerability Scanner

Bug bounty-oriented web vulnerability scanning tool.

Features

Module	Description	Risk
SQL Injection	Error-based + Time-based blind detection	critical/high
XSS	Reflected XSS + DOM XSS detection	high/medium
Sensitive Files	46 common sensitive paths + backup files	medium
Security Headers	CSP/HSTS/X-Frame-Options/X-Content-Type-Options	low
Open Redirect	Parameter-based redirect detection	medium
Info Gathering	Server/tech/port/waf detection	info

Quick Start

bash

# Install
pip install -r requirements.txt

# Scan a target
python main.py scan https://example.com

# Quick scan (low verbosity)
python main.py scan https://example.com --speed fast

# Full scan with all modules
python main.py scan https://example.com --speed thorough

Application

bash

# Launch Gradio Web UI
python app.py

Usage

Command	Description
`python main.py scan <url>`	Full scan
`python main.py version`	Show version
`python app.py`	Launch Web UI

Architecture

vuln-scanner/
├── scanner/
│   ├── __init__.py       # Package init
│   ├── models.py         # Data models
│   ├── core.py           # Scan engine
│   ├── report.py         # Report generation
│   ├── checks/
│   │   ├── __init__.py
│   │   ├── sqli.py       # SQL Injection
│   │   ├── xss.py        # Cross-Site Scripting
│   │   ├── sensitive.py  # Sensitive file detection
│   │   ├── headers.py    # Security headers
│   │   ├── redirect.py   # Open redirect
│   │   └── info.py       # Info gathering
├── app.py                # Gradio Web UI
├── Dockerfile
├── requirements.txt
└── requirements_web.txt