⚡ VulnScan Pro

A professional cybersecurity vulnerability scanner built with Python 3.13 and PyQt6. Designed for authorised security assessments, educational research, and defensive cybersecurity.

⚠ Legal Notice

This tool must only be used on systems you own or have explicit written permission to test. Unauthorised scanning of systems you do not own is illegal in most jurisdictions. The authors accept no liability for misuse.

Features

Screenshot

Installation

Prerequisites

• Python 3.10 or later (3.13 recommended)
• pip

Steps

# 1. Navigate to the project directory
cd "VulnScan_Pro"

# 2. (Recommended) Create a virtual environment
python -m venv venv
venv\Scripts\activate          # Windows
# source venv/bin/activate     # Linux / macOS

# 3. Install dependencies
pip install -r requirements.txt

# 4. Launch the application
python main.py

Usage

Starting a Scan

1. Click New Scan in the sidebar
2. Enter your target:
   • Single IP: 192.168.1.1
   • CIDR range: 192.168.1.0/24
   • IP range: 192.168.1.1-254
   • Hostname: myserver.local
3. Select a port preset (Common Ports recommended for quick scans)
4. Adjust thread count and timeout as needed
5. Click ▶ Start Scan

Viewing Results

Results appear automatically in the Results page after each scan.
Each finding shows:

• CVE ID and name
• Severity and CVSS score
• Detailed description
• Remediation advice
• Detected service version

Generating Reports

1. Navigate to Reports
2. Select a completed scan
3. Click Generate PDF Report
4. Choose a save location

Filtering Results

Use the filter bar at the top of the Results page to filter by:

• Severity level
• Host IP
• Port number
• Service name

Project Structure

VulnScan_Pro/
├── main.py                  # Application entry point
├── requirements.txt
├── core/
│   ├── scanner.py           # Multithreaded port scanner (QThread)
│   ├── service_detector.py  # Banner grabbing & service fingerprinting
│   ├── vuln_engine.py       # CVE matching engine
│   ├── risk_calculator.py   # CVSS-weighted risk score
│   └── scheduler.py         # Recurring scan scheduler
├── gui/
│   ├── main_window.py       # Main window with sidebar navigation
│   ├── dashboard.py         # Statistics dashboard with charts
│   ├── scan_page.py         # Scan configuration & execution
│   ├── results_page.py      # Findings browser with filtering
│   ├── history_page.py      # Historical scan management
│   ├── reports_page.py      # PDF report generation
│   ├── settings_page.py     # Application preferences
│   └── widgets/
│       ├── stat_card.py     # Metric summary card
│       ├── charts.py        # DonutChart, BarChart, LineChart
│       └── severity_badge.py# Severity pill badge
├── database/
│   ├── db_manager.py        # SQLite CRUD operations
│   └── vuln_db.py           # Local vulnerability database (40+ CVEs)
├── reports/
│   └── pdf_generator.py     # ReportLab PDF report builder
└── utils/
    ├── validators.py         # Input validation
    ├── network_utils.py      # Socket utilities
    └── logger.py             # Centralised logging

Vulnerability Database

The local CVE database covers common services including:

Ethical Use

This tool is built for:

• ✅ Testing your own systems
• ✅ Authorised penetration testing engagements
• ✅ Educational cybersecurity labs
• ✅ Defensive security assessment
• ❌ Scanning systems without permission
• ❌ Malicious reconnaissance
• ❌ Any illegal activity

Architecture Notes

• Threading: All network I/O runs in QThread workers using ThreadPoolExecutor for parallel port probing. The GUI never blocks.
• Database: SQLite with WAL mode and foreign key enforcement via db_manager.py.
• Charts: Custom QPainter-based widgets — no external charting library required.
• Reports: ReportLab Platypus framework with branded dark-theme styling.