Advanced Web Security Assessment Tool developed in Python for security learning and authorized security assessments.
- β Technology Fingerprinting
- β Subdomain Enumeration
- β WAF Detection
- β SSL/TLS Configuration Analysis
- β Security Headers Analysis
- β Cookie Security Analysis
- β API Endpoint Discovery
- β CVE Information Lookup
- β Directory Discovery
- β Port Scanning (Optional)
- β HTML Report Generation
- β JSON Report Generation
- β Multi-threaded Scanning
- β Proxy Support (Burp Suite)
- β Colorized Terminal Output
- β Professional CLI Interface
- Python 3.10+
- Kali Linux / Ubuntu / Debian
- Internet Connection
Clone the repository:
git clone https://github.com/AyushSharma-arch/WebSecurityScanner.git
cd WebSecurityScannerInstall dependencies:
pip3 install -r requirements.txtBasic Scan
python3 recon.py -u https://example.comGenerate HTML Report
python3 recon.py -u https://example.com --html report.htmlGenerate JSON Report
python3 recon.py -u https://example.com --json report.jsonEnable Subdomain Enumeration
python3 recon.py -u https://example.com --subdomainPort Scan
python3 recon.py -u https://example.com --portsProxy Support
python3 recon.py -u https://example.com -p http://127.0.0.1:8080WebSecurityScanner/
βββ recon.py
βββ README.md
βββ requirements.txt
βββ LICENSE
βββ screenshots/
βββ reports/
Add your terminal screenshots inside the screenshots folder.
This project is licensed under the MIT License.
Ayush Sharma
GitHub: https://github.com/AyushSharma-arch
This project is intended for security education and authorized security assessments only. Always obtain permission before assessing systems you do not own or administer.