Vulnerability Assessment Tool

A Python-based cybersecurity project designed to perform basic vulnerability assessment and network service analysis.

This tool can:

• Scan open ports
• Detect running services
• Perform banner grabbing
• Classify security risks
• Identify potential CVEs
• Generate vulnerability reports

---

Project Overview

This project was developed as a cybersecurity learning project to understand how vulnerability assessment tools work in real-world environments.

The tool combines:

• Network scanning
• Service enumeration
• Risk analysis
• CVE intelligence
• Automated reporting

into a simple command-line application.

---

Main Features

1. Port Scanning

Scans target systems to identify open ports using Nmap.

Example:

Port 80 -> OPEN
Port 445 -> OPEN

---

2. Service Detection

Identifies services running on open ports.

Example:

80 -> HTTP
445 -> SMB
22 -> SSH

---

3. Banner Grabbing

Retrieves service banners for software identification and enumeration.

Example:

Server: Microsoft-HTTPAPI/2.0

---

4. Risk Classification

Classifies detected services into risk levels.

Risk Level	Description
INFO	Informational
LOW	Low Risk
MEDIUM	Medium Risk
HIGH	High Risk
CRITICAL	Critical Risk

---

5. CVE Lookup

Matches detected software banners against a mini CVE intelligence database.

Example:

CVE-2021-41773
Apache Path Traversal Vulnerability

---

6. Report Generation

Automatically generates scan reports in .txt format.

Generated reports are stored in:

reports/

---

Technologies Used

Technology	Purpose
Python	Main programming language
Nmap	Network scanning engine
python-nmap	Python wrapper for Nmap
socket	Banner grabbing
colorama	Colored terminal output

---

Project Structure

Project Vulnerability Assessment/
│
├── main.py
├── scanner.py
├── analyzer.py
├── cve_lookup.py
├── report.py
├── requirements.txt
│
├── reports/
│
└── screenshots/

---

Installation Guide

1. Clone the Repository

git clone https://github.com/aryaash-code/vulnerability-assessment-tool.git

---

2. Open the Project Folder

cd vulnerability-assessment-tool

---

3. Install Python Dependencies

pip install -r requirements.txt

---

4. Install Nmap

Download and install Nmap:

https://nmap.org/download.html

After installation, restart VS Code or terminal.

---

How to Run

Run the application:

python main.py

---

Example Targets

Localhost

127.0.0.1

Router

192.168.1.1

Nmap Test Server

scanme.nmap.org

---

Example Output

[OPEN] Port 445 -> microsoft-ds | Risk: HIGH

Banner:
Microsoft-HTTPAPI/2.0

[!] Potential CVE Found

CVE: Potential HTTP.sys Related Vulnerabilities
Severity: MEDIUM

---

Example Workflow

Input Target
      ↓
Port Scanning
      ↓
Service Detection
      ↓
Banner Grabbing
      ↓
Risk Analysis
      ↓
CVE Lookup
      ↓
Report Generation

---

Educational Purpose

This project is intended for:

• Cybersecurity learning
• Academic research
• Authorized vulnerability assessment only

Do NOT use this tool against systems without permission.

---

Future Improvements

Possible future enhancements:

• HTML Report Export
• CVE API Integration
• GUI Dashboard
• JSON Export
• Multi-threaded Scanning
• Database Logging

---

Screenshots

Add screenshots of:

• Scan results
• CVE detection
• Generated reports
• Terminal output

inside the screenshots/ folder.

---

Author

Developed by: Arya Sheva Pratama

Cybersecurity Student Project