WebSentry is a modular, automated web application vulnerability scanner designed to identify common security flaws in web applications. It performs reconnaissance, crawling, and targeted security testing to detect vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), CSRF, IDOR, and Open Redirects.
The tool is built with a plugin-based architecture, allowing easy extension and integration of additional vulnerability checks.
- Automate detection of common web vulnerabilities
- Provide a modular and extensible scanning framework
- Simulate real-world attack scenarios
- Assist in penetration testing and security assessments
- Generate structured vulnerability reports
Target Application ↓ Recon Module → Crawler → Scanner Engine → Plugins → Report Generator
- Identifies target technologies
- Extracts headers and cookies
- Collects initial URLs
- Discovers internal links
- Extracts parameters for testing
- Builds attack surface
- Coordinates scanning process
- Executes vulnerability plugins
- Aggregates results
- Maintains persistent HTTP sessions
- Handles cookies and headers
- Detects backend technologies
- Uses headers like
ServerandX-Powered-By
- Injects payloads into parameters
- Detects anomalies in responses
- Tests reflected payload execution
- Identifies input sanitization issues
- Checks for missing CSRF tokens
- Identifies insecure forms
- Detects insecure direct object references
- Tests parameter manipulation
- Identifies unsafe redirect endpoints
- Automated vulnerability scanning
- Modular plugin-based architecture
- Parameter-based attack testing
- Technology fingerprinting
- Session-aware scanning
- JSON report generation
- Extensible design for adding new plugins
git clone https://github.com/revanth3205/websentry.git
cd websentry