WebScan v2.0.0

WebScan v2.0.0 🚀

The 2.0 milestone — WebScan grows from a configuration checker into a complete async web-security auditor.

⚡ Benchmark

Full scan in 7.3s — 4.7× faster than Nuclei, 5.8× faster than Nikto, with 0 false positives (28 findings: 1 crit · 9 high · 9 med · 7 low · 2 info).

✨ Highlights since 1.0

• 19 plugins (up from 7) — added xss, path_traversal, open_redirect, tech_fingerprint, ssl_tls, ssrf, subdomains, robots_sitemap, secrets, graphql, cve_lookup, plus blind (boolean/time) SQL injection.
• Crawler / spider with depth, scope, exclusion and robots.txt support.
• Authentication — cookie, header, basic-auth and form-login.
• Safe Mode (--safe-mode) — polite preset for site owners.
• Proxy / SOCKS5, User-Agent rotation and request pacing for stealth.
• 5 report formats — JSON, Markdown, HTML, SARIF 2.1.0, CSV (+ JSON Lines).
• CVE integration — maps detected software/versions to NVD CVEs (~350K records).
• Library mode — webscan.scan() / scan_sync() for embedding.

✅ Quality

• 214 tests, 94% line coverage
• mypy --strict clean · ruff clean · CI coverage gate (--cov-fail-under=80)

See the full CHANGELOG.