🛡️ VulnScan — Web Vulnerability Scanner

A powerful, beginner-friendly web vulnerability scanner built for ethical hackers and security researchers.

Developed by Ankush | CSE — Cybersecurity Engineer

---

⚠️ Legal Disclaimer

This tool is strictly for educational purposes and authorized security testing only.

• ✅ Use on your own websites
• ✅ Use in authorized Bug Bounty programs (in-scope targets only)
• ✅ Use in paid/authorized penetration testing engagements
• ❌ DO NOT scan websites without written permission from the owner
• ❌ Unauthorized scanning is a criminal offense under IT Act, CFAA, and cybercrime laws worldwide

The developer is not responsible for any misuse of this tool.

---

📸 Preview

██╗   ██╗██╗   ██╗██╗     ███╗   ██╗███████╗ ██████╗ █████╗ ███╗   ██╗
██║   ██║██║   ██║██║     ████╗  ██║██╔════╝██╔════╝██╔══██╗████╗  ██║
██║   ██║██║   ██║██║     ██╔██╗ ██║███████╗██║     ███████║██╔██╗ ██║
╚██╗ ██╔╝██║   ██║██║     ██║╚██╗██║╚════██║██║     ██╔══██║██║╚██╗██║
 ╚████╔╝ ╚██████╔╝███████╗██║ ╚████║███████║╚██████╗██║  ██║██║ ╚████║
  ╚═══╝   ╚═════╝ ╚══════╝╚═╝  ╚═══╝╚══════╝ ╚═════╝╚═╝  ╚═╝╚═╝  ╚═══╝

           Web Vulnerability Scanner v1.0.0
  Developer: Ankush  |  CSE (Cybersecurity Engineer)

---

🔍 What Does VulnScan Check?

Module	What It Detects	Why It Matters
🌐 DNS & IP Info	IP address, reverse DNS	Reconnaissance info
🔌 Port Scanner	Open ports (FTP, SSH, MySQL, etc.)	Exposed services = attack surface
🔒 SSL/TLS Check	Certificate validity, expiry	Expired cert = MITM attack risk
📋 HTTP Headers	Missing security headers	Headers prevent XSS, Clickjacking, etc.
📁 Sensitive Files	.env, .git, backup.sql, admin panels	Data/credential exposure
💉 SQL Injection	Error-based SQLi detection	DB can be stolen or wiped
⚡ XSS Detection	Reflected XSS payload test	Session hijacking, phishing
🍪 Cookie Security	HttpOnly, Secure, SameSite flags	Prevent cookie theft

---

🚀 Installation & Setup

🐧 Linux (Ubuntu/Debian/Kali)

# Step 1: Clone the repository
git clone https://github.com/yourusername/vulnscan.git

# Step 2: Go into the folder
cd vulnscan

# Step 3: Make the script executable
chmod +x vulnscan.py

# Step 4: Run it!
python3 vulnscan.py example.com

---

📱 Termux (Android)

# Step 1: Update Termux packages
pkg update && pkg upgrade -y

# Step 2: Install Python
pkg install python -y

# Step 3: Clone the repository
pkg install git -y
git clone https://github.com/yourusername/vulnscan.git

# Step 4: Go into the folder
cd vulnscan

# Step 5: Run it!
python3 vulnscan.py example.com

---

🍎 macOS

# Step 1: Install Python (if not installed)
brew install python3

# Step 2: Clone the repository
git clone https://github.com/yourusername/vulnscan.git

# Step 3: Enter folder
cd vulnscan

# Step 4: Run it!
python3 vulnscan.py example.com

---

📖 Usage

# Basic usage
python3 vulnscan.py <target>

# Examples
python3 vulnscan.py example.com
python3 vulnscan.py https://testsite.com
python3 vulnscan.py 192.168.1.1

✅ You can provide the target with or without https:// — VulnScan handles it automatically.

---

📊 Sample Output

──────────────────────────────────────────────────────────
  🔍 HTTP Security Headers
──────────────────────────────────────────────────────────
  [VULN]  Strict-Transport-Security — NOT SET (HSTS Missing)
          ↳ Forces browser to always use HTTPS. Without it, attackers can downgrade to HTTP.

  [SAFE]  X-Content-Type-Options is set ✓

  [VULN]  Content-Security-Policy — NOT SET (No CSP — XSS Risk Higher)
          ↳ CSP restricts what scripts can run. Without it, XSS attacks are easier.

  [WARN]  Server header reveals: 'Apache/2.4.41' — Version info exposed!
          ↳ Knowing server version helps attackers find known CVEs to exploit.

──────────────────────────────────────────────────────────
  🔍 Sensitive Files & Directory Exposure
──────────────────────────────────────────────────────────
  [VULN]  Environment File found at: /.env
          ↳ May contain DB passwords, API keys, secret tokens!

  [SAFE]  /.git/config — Not found

---

🛠️ Requirements

• Python 3.6+
• No external libraries needed — uses only Python standard library
• Works on any OS that supports Python

---

🧠 Understanding the Output

Each finding is labeled clearly so beginners can understand:

Label	Meaning
[VULN] 🔴	Vulnerability found — needs immediate attention
[WARN] 🟡	Potential issue — should be reviewed
[SAFE] 🟢	This check passed — no issue found
[INFO] 🔵	General information — no action needed
↳	Explanation of WHY this is a problem

---

📂 Project Structure

vulnscan/
│
├── vulnscan.py       # Main scanner tool
├── README.md         # Documentation
└── LICENSE           # MIT License

---

🗺️ Roadmap

• DNS & IP Recon
• Port Scanner
• SSL/TLS Analysis
• HTTP Security Headers
• Sensitive File Detection
• Basic SQLi Detection
• Basic XSS Detection
• Cookie Security Analysis
• Subdomain Enumeration
• WHOIS Lookup
• Full Report Export (HTML/PDF)
• CVE Lookup Integration
• Multi-threading for faster scans
• JSON/TXT output mode

---

🤝 Contributing

Contributions are welcome! Here's how:

# Fork the repo
# Create your feature branch
git checkout -b feature/new-module

# Commit your changes
git commit -m "Add: new vulnerability module"

# Push to branch
git push origin feature/new-module

# Open a Pull Request

---

👨‍💻 Author

Ankush CSE — Cybersecurity Engineer

"Hack Ethically. Defend Digitally."

---

📜 License

This project is licensed under the MIT License — see the LICENSE file for details.

---

⭐ If this tool helped you, please give it a star! ⭐

Made with ❤️ by Ankush | CSE (Cybersecurity Engineer)