🕷️ VulnScan

Web Vulnerability Scanner — Detect XSS, SQL Injection, LFI, missing security headers, and SSL misconfigurations.

🔥 Features

• 💉 SQL Injection — Error-based detection with 9 payloads across MySQL, PostgreSQL, Oracle, SQLite
• ⚡ XSS (Cross-Site Scripting) — Reflected XSS testing with 8 payloads including SSTI detection
• 📂 Local File Inclusion — Path traversal with encoding bypass techniques
• 🔒 Security Headers Audit — CSP, HSTS, X-Frame-Options, and more
• 🔐 SSL/TLS Analysis — Weak protocol and expired certificate detection
• 🕸️ Auto Form Crawling — Automatic form discovery and parameter testing
• 📊 JSON Export — Machine-readable output for CI/CD integration
• 🚫 Zero Dependencies — Pure Python stdlib

🚀 Usage

```bash

Full scan

vulnscan https://target.com

Specific tests

vulnscan https://target.com --xss vulnscan https://target.com --sqli vulnscan https://target.com --headers vulnscan https://target.com --lfi

With URL parameters

vulnscan "https://target.com/search?q=test&id=1" --full

JSON output

vulnscan https://target.com --json -o results.json ```

⚠️ Disclaimer

For authorized penetration testing only. Only scan targets you have explicit written permission to test. Unauthorized scanning is illegal. The author is not responsible for misuse.

📄 License

MIT — @redX000