VulnScan - Automatic Web Vulnerability Scanner

⚠️ LEGAL DISCLAIMER - please READ CAREFULLY

This tool is for EDUCATIONAL PURPOSES and SECURITY RESEARCH ONLY !

ONLY scan:

• Your own web applications
• Systems with explicit written permission
• Intentionally vulnerable applications (DVWA,OWASP Juice Shop,HackTheBox)

Unauthorized scanning is ILLEGAL in most jurisdictions and violates:

• Computer Fraud and Abuse Act (USA)
• Computer Misuse Act (UK)
• Similar laws in EU/Italy

The author is NOT responsible for misuse of this tool. By using this software you accept full responsibility for all your actions.

Features

VulnScan is a comprehensive web vulnerability scanner that detects:

• ✅ SQL Injection (Error-based, Boolean-based, Time-based)
• ✅ Cross-Site Scripting (XSS) (Reflected, Stored)
• ✅ Path Traversal (Directory traversal attacks)
• ✅ Security Headers (Missing CSP, HSTS, X-Frame-Options, etc.)
• ✅ Automated Web Crawler (Discovers pages and forms)
• ✅ Real-time Dashboard (Live progress tracking)
• ✅ Professional PDF Reports (Executive summary + technical details)

Installation

# Clone repository
git clone https://github.com/ChristianTorchia/VulnScan.git
cd VulnScan

# Install dependencies
pip install -r requirements.txt

# Initialize database
python3 src/database.py

Usage

Command Line Interface

# Basic scan
python3 src/scanner.py http://testphp.vulnweb.com

# Scan with PDF report
python3 src/scanner.py http://testphp.vulnweb.com --pdf report.pdf

Web Dashboard

# Start web server
python3 src/web/app.py

# Open browser to http://127.0.0.1:5000
# Enter target URL and click "Start Scan"
# Download PDF report when complete

Testing Environment

Install DVWA (Damn Vulnerable Web Application):

# Using Docker (recommended)
docker run -p 80:80 vulnerables/web-dvwa

# Access at http://localhost
# Default credentials: admin/password
# Set security level to "Low" for testing

Alternative test targets:

• http://testphp.vulnweb.com (public vulnerable site)
• OWASP Juice Shop

Architecture

VulnScan/
├── src/
│   ├── crawler/          # Web crawler
│   ├── detectors/        # Vulnerability detectors
│   ├── reporting/        # PDF generation
│   ├── web/             # Flask dashboard
│   ├── scanner.py       # Main scanner
│   └── database.py      # Database init
├── payloads/            # Attack payloads
├── database/            # SQLite storage
├── static/              # CSS/JS
└── templates/           # HTML templates

Sample Output

Total vulnerabilities found: 32
  Critical: 13
  High: 14
  Medium: 3
  Low: 2

Technical Details

SQL Injection Detection:

• Error-based: SQL error patterns
• Boolean-based: Response differences
• Time-based: SLEEP() payloads

XSS Detection:

• Payload reflection checking
• Output encoding verification

Path Traversal:

• Directory traversal patterns
• File content indicators

Security Headers:

• HTTP header analysis
• Missing header detection

Credits

Developed by Christian Torchia
Cybersecurity Student in Turin, italy
https://christiantorchia.com

License

MIT License - Use ethically and responsibly.