Web Vulnerability Scanner

A Python-based web vulnerability scanner designed to identify common web application security vulnerabilities in authorized testing environments.

Project Overview

This project implements a lightweight vulnerability scanner capable of testing web applications for:

• SQL Injection
• Cross-Site Scripting (XSS)
• Path Traversal

The scanner was developed and tested using intentionally vulnerable PortSwigger Web Security Academy labs.

Features

• Target URL scanning
• GET parameter analysis
• SQL Injection detection
• Cross-Site Scripting detection
• Path Traversal detection
• Payload-based testing
• Basic response analysis
• Vulnerability evidence reporting
• Command-line interface

Project Structure

Web-Vulnerability-Scanner/
│
├── scanner/
│   ├── __init__.py
│   ├── crawler.py
│   ├── detector.py
│   ├── main.py
│   └── payloads.py
│
├── screenshots/
│   ├── 01-project-structure.png
│   ├── 02-scanner-running.png
│   ├── 03-sqli-detected.png
│   ├── 05-xss-detected.png
│   └── 06-path-traversal-detected.png
│
├── reports/
├── tests/
├── requirements.txt
└── README.md