v0.1.0 - Initial Release
What's New
✨ Features
WordPress Vulnerability Detection
- WordPress version fingerprinting (meta tags, readme, RSS, assets)
- Plugin and theme enumeration (100+ popular ones)
- Sensitive file discovery (70+ paths: wp-config backups, .env, SQL dumps, .git)
- User enumeration (Author IDOR, REST API, HTML parsing)
- Security header analysis (HSTS, CSP, X-Frame-Options, cookie security)
- Misconfiguration detection (XML-RPC, debug mode, directory listing, file editor)
AI-Powered Analysis
- GPT-4 integration for intelligent vulnerability analysis
- Claude integration support
- Ollama (local) support for privacy-focused analysis
- Smart recommendations and remediation guidance
Professional Reporting
- Beautiful, customizable HTML reports (Mystical theme with deep purple/dark tones)
- Machine-readable JSON output
- Evidence preservation with HTTP responses
- Color-coded severity badges (Critical, High, Medium, Low, Info)
- AI-generated hardening guides (technical + executive modes)
Ethical Framework
- Consent token system for authorized scanning only
- Security compliance documentation
- Responsible disclosure guidelines
- Ethical security practices
Docker Support
- Easy Docker deployment
- Docker Compose setup
- Vulnerable test lab environment included
- Concurrent scanning with intelligent rate limiting
- SQLite database for scan history and trend analysis
🔧 Technical Details
- Python 3.10+
- Comprehensive error handling
- Professional logging
- Persistent scan history tracking
Getting Started
See README.md#-quick-start for detailed usage instructions.
Documentation
- README.md - Full documentation
- docs/CONSENT.md - Consent system and ethical guidelines
- docs/AI_INTEGRATION.md - Configure AI providers
- docs/TESTING_GUIDE.md - Comprehensive testing instructions
- docs/ETHICS.md - Security & responsible disclosure
License
MIT License - See LICENSE file
- Questions? Start a GitHub Discussion
- Found a bug? Open an Issue
Contributors: @rodhnin
Website: https://www.rodhnin.com