Repository navigation
🚀 scrypte v1.0.0 – First Release
scrypte is a lightweight tool for detecting web vulnerabilities. This first release focuses on providing essential scanning capabilities in a clean, easy-to-use CLI tool. Perfect for security researchers, developers, and anyone looking to secure their web applications.
✨ Highlights
-
Header Security Check: Scans for missing or weak security headers (e.g., CSP, HSTS, X-Frame-Options).
-
XSS Vulnerability Detection: Identifies Cross-Site Scripting (XSS) risks with customizable payloads.
-
SQL Injection Testing: Detects potential SQL Injection points with error-based, boolean-based, and time-based techniques.
-
TLS/SSL Configuration Checker: Verifies SSL/TLS security settings for HTTPS sites.
-
Directory & File Enumeration: Finds exposed files and directories, like
.envandconfig.php. -
Comprehensive JSON Reports: Summarizes all vulnerabilities with severity and recommendations.
⚠️ Known Limitations
- Subdomain & IP Scanning: Currently not supported.
- HTTP-only Sites: Optimized for HTTPS, with limited support for non-standard configurations.
Full Changelog: View all changes in v1.0.0
Thank you for trying scrypte! For any issues, feel free to open an issue on GitHub.