Skip to content

Latest commit

 

History

History
53 lines (39 loc) · 1.43 KB

README.md

File metadata and controls

53 lines (39 loc) · 1.43 KB

Website Vulnerability Scanner

A Python-based tool that is used to scan websites for various types of vulnerabilities.

Description

The Website Vulnerability Scanner is a Python script that uses multiple libraries such as requests, BeautifulSoup, selenium, and sslyze to identify multiple types of vulnerabilities on the given website. This script checks for the following types of vulnerabilities:

  1. SQL Injection
  2. Cross-Site Scripting (XSS)
  3. Command Injection
  4. Local File Inclusion (LFI)
  5. HTTP Verb Tampering
  6. File Upload Vulnerabilities
  7. Session Fixation
  8. HTTP Parameter Pollution (HPP)
  9. Insecure Direct Object References (IDOR)
  10. Directory Traversal
  11. CORS Misconfiguration
  12. Misconfigured Security Headers
  13. SSL/TLS vulnerabilities

Prerequisites

The script requires Python3 and the following libraries installed:

  1. requests
  2. BeautifulSoup
  3. selenium
  4. sslyze

You can install these packages using pip:

pip install -r requirements.txt

The script also requires ChromeDriver installed on the system.

Usage

python3 website_vulnerability_scanner.py <URL> <USERNAME> <PASSWORD>

Where: is the URL of the website to scan. and are the credentials for the website (if any).

Disclaimer

This script is intended for educational purposes and to help improve the security of websites.

License

This project is licensed under the MIT License - see the LICENSE file for details.