Comprehensive Website Vulnerability Scanner with Multi-Threading and HTML Reporting
Cyber Wolf Hunter is a powerful, easy-to-use Python package designed for comprehensive website vulnerability assessment. With just one line of code, you can perform advanced security scans with multi-threading support and generate professional HTML reports.
- π One-Line Interface: Simple
wolfhunter("example.com", thread=100)command - π§΅ Multi-Threading: Concurrent scanning for faster results (up to 100 threads)
- π Professional Reports: Beautiful HTML reports with charts and detailed findings
- π Comprehensive Scanning: 19+ attack vectors with 1000+ payloads
- β‘ High Performance: Optimized algorithms for enterprise-level scanning
- π‘οΈ Security Focus: Built by cybersecurity professionals
- π± Cross-Platform: Works on Windows, macOS, and Linux
- π§ Easy Integration: Simple API for custom implementations
# Clone the repository
git clone https://github.com/Tamilselvan-S-Cyber-Security/Cyber-Wolf-Hunter.git
# Navigate to directory
cd Cyber-Wolf-Hunter
# Install dependencies
pip install -e .from cyber_wolf_hunter import wolfhunter
# Scan a website with 50 threads
wolf = wolfhunter("example.com", thread=50)
results = wolf.scan()
wolf.generate_report("security_report.html")from cyber_wolf_hunter import WolfHunter
# Create scanner instance
scanner = WolfHunter("https://target-website.com", threads=100)
# Customize scan settings
scanner.timeout = 30
scanner.verbose = True
# Run comprehensive scan
results = scanner.scan()
# Generate detailed report
scanner.generate_report("comprehensive_report.html")
# Access individual results
print(f"SQL Injection vulnerabilities: {len(results.get('sql_injection', []))}")
print(f"XSS vulnerabilities: {len(results.get('xss', []))}")from cyber_wolf_hunter.scanners import VulnerabilityScanner
scanner = VulnerabilityScanner()
# Check specific vulnerabilities
sql_results = scanner.check_sql_injection("https://example.com")
xss_results = scanner.check_xss("https://example.com")
dir_traversal = scanner.check_directory_traversal("https://example.com")
cmd_injection = scanner.check_command_injection("https://example.com")
# New advanced checks
xxe_results = scanner.check_xxe_injection("https://example.com")
ssrf_results = scanner.check_ssrf("https://example.com")
template_results = scanner.check_template_injection("https://example.com")
hpp_results = scanner.check_http_parameter_pollution("https://example.com")# High-performance scanning
wolf = wolfhunter("example.com", thread=100)
results = wolf.scan()
# Balanced performance
wolf = wolfhunter("example.com", thread=50)
results = wolf.scan()
# Conservative scanning
wolf = wolfhunter("example.com", thread=10)
results = wolf.scan()# Generate basic report
wolf.generate_report("basic_report.html")
# Generate with custom title
wolf.generate_report("custom_report.html", title="Security Assessment Report")
# Generate with company branding
wolf.generate_report("company_report.html",
company_name="Your Company",
logo_url="https://yourcompany.com/logo.png")- Union-based attacks
- Time-based blind SQLi
- Error-based SQLi
- Boolean-based blind SQLi
- Stacked queries
- Database-specific payloads
- Reflected XSS
- Stored XSS
- DOM-based XSS
- Filter bypass techniques
- Event handler injection
- HTML5 event injection
- Unix/Linux path traversal
- Windows path traversal
- URL encoding variations
- Null byte injection
- Alternative separators
- Unix command injection
- Windows command injection
- File operation commands
- Network commands
- System information gathering
- XXE Injection: XML external entity attacks
- SSRF: Server-side request forgery
- Template Injection: Server-side template injection
- HTTP Parameter Pollution: Parameter manipulation attacks
scanner = WolfHunter("example.com", threads=50)
# Timeout settings
scanner.timeout = 30 # Request timeout in seconds
scanner.connect_timeout = 10 # Connection timeout
# Verbose mode
scanner.verbose = True # Detailed output
# Custom headers
scanner.headers = {
'User-Agent': 'Custom Scanner v1.0',
'Authorization': 'Bearer your-token'
}
# Custom cookies
scanner.cookies = {
'session': 'your-session-id',
'auth': 'your-auth-token'
}from cyber_wolf_hunter.scanners import VulnerabilityScanner
scanner = VulnerabilityScanner()
# Add custom SQL injection payloads
custom_sql_payloads = [
"' OR 1=1--",
"'; DROP TABLE users--",
"' UNION SELECT username,password FROM users--"
]
# Add custom XSS payloads
custom_xss_payloads = [
"<script>alert('Custom XSS')</script>",
"<img src=x onerror=alert('Custom')>"
]# For small websites (1-100 pages)
threads = 10-25
# For medium websites (100-1000 pages)
threads = 25-50
# For large websites (1000+ pages)
threads = 50-100
# For enterprise scanning
threads = 100+ (with proper rate limiting)# Process results in batches
results = scanner.scan()
for batch in results:
process_batch(batch)
del batch # Free memory
# Use generators for large scans
def scan_generator(scanner):
for result in scanner.scan():
yield resultclass WolfHunter:
"""Main scanner class for vulnerability assessment"""
def __init__(self, target_url: str, threads: int = 10):
"""Initialize scanner with target URL and thread count"""
def scan(self) -> dict:
"""Run comprehensive vulnerability scan"""
def generate_report(self, filename: str, **kwargs) -> str:
"""Generate HTML security report"""
class VulnerabilityScanner:
"""Individual vulnerability checking methods"""
def check_sql_injection(self, target_url: str) -> list:
"""Check for SQL injection vulnerabilities"""
def check_xss(self, target_url: str) -> list:
"""Check for XSS vulnerabilities"""
# ... additional methods- Fork the repository
- Create a feature branch:
git checkout -b feature/amazing-feature - Commit your changes:
git commit -m 'Add amazing feature' - Push to the branch:
git push origin feature/amazing-feature - Open a Pull Request
# Clone repository
git clone https://github.com/Tamilselvan-S-Cyber-Security/Cyber-Wolf-Hunter.git
# Install development dependencies
pip install -e ".[dev]"
# Run tests
pytest
# Code formatting
black cyber_wolf_hunter/
# Linting
flake8 cyber_wolf_hunter/
π― Cybersecurity Professional & Developer
π Specializations:
- Web Application Security
- Penetration Testing
- Vulnerability Assessment
- Security Tool Development
- Python Security Libraries
π Achievements:
- 1000+ Security Vulnerabilities Discovered
- 563+ Security Tools Developed
- 880+ Security Assessments Completed
- Open Source Security Contributor
| Metric | Value |
|---|---|
| Scan Speed | Up to 1000 requests/second |
| Memory Usage | < 100MB for large scans |
| CPU Usage | Optimized multi-threading |
| Network | Configurable rate limiting |
| Vulnerability Type | Payloads | Detection Rate |
|---|---|---|
| SQL Injection | 100+ | 95%+ |
| XSS | 150+ | 90%+ |
| Directory Traversal | 80+ | 85%+ |
| Command Injection | 120+ | 88%+ |
| XXE Injection | 50+ | 80%+ |
| SSRF | 40+ | 75%+ |
| Template Injection | 60+ | 82%+ |
| HTTP Parameter Pollution | 30+ | 70%+ |
- β Use for: Security research, authorized penetration testing, educational purposes
- β Do NOT use for: Unauthorized testing, malicious attacks, illegal activities
- π Always obtain permission before scanning any website
- π Follow responsible disclosure practices for any vulnerabilities found
- π Website: Portfolio
- π§ Email: tamilselvanreacher@gmail.com
- π GitHub: Tamilselvan-S-Cyber-Security
- π Documentation: Wiki
- π Issues: GitHub Issues
Made with β€οΈ by S.Tamilselvan for the Cybersecurity Community
Empowering security professionals with powerful, easy-to-use tools