A Python-based vulnerability scanning tool that performs basic security assessments on network services and web applications. The tool is designed to identify common exposure points such as open ports, missing HTTP security headers, and SSL/TLS certificate configuration issues, then generate structured reports for analysis.
This project was built as an entry-level cybersecurity tool to gain hands-on experience with vulnerability assessment, network scanning, and security automation concepts.
- TCP port scanning of common service ports
- Basic service/banner detection
- SSL/TLS certificate inspection (issuer, expiration, validity period)
- Web security header analysis
- Automated report generation in both JSON and text formats
The scanner generates two report files:
scan_report.json– structured machine-readable outputscan_report.txt– human-readable security report
Run the scanner against a target domain or IP address to quickly identify:
- Exposed network services
- Missing web security protections
- SSL certificate validity and potential expiration risks
This tool is intended for educational and authorized security testing purposes only. Do not use it against systems you do not own or have explicit permission to test.