Web Vulnerability Scanner

A lightweight, asynchronous web vulnerability scanner written in Rust.
Designed for security professionals, developers, and enthusiasts to quickly identify common web security issues such as missing HTTP security headers, reflected Cross-Site Scripting (XSS), SQL Injection, open redirects, insecure cookies, CSRF token absence, and more.

---

Features

• HTTP Security Header Checks: Detects missing or misconfigured headers like Content-Security-Policy, X-Frame-Options, Strict-Transport-Security, X-Content-Type-Options, and Referrer-Policy.
• Reflected XSS Scanning: Tests URL input parameters with common XSS payloads and detects reflections in HTTP responses.
• SQL Injection Detection: Injects SQL payloads to identify vulnerable parameters.
• Open Redirect Detection: Checks URL parameters for unsafe redirect behaviors.
• Insecure Cookie Checks: Flags cookies missing HttpOnly or Secure flags.
• CSRF Token Validation: Verifies presence of CSRF tokens in form inputs.
• Generates a clean, well-structured HTML report summarizing all findings.
• Uses asynchronous HTTP requests with reqwest and tokio for efficient scanning.

---

Installation

Ensure you have Rust installed (version 1.70 or higher recommended).

Clone the repository:

git clone https://github.com/yourusername/web-vulnerability-scanner.git
cd web-vulnerability-scanner