README.md

Web Vulnerability Scanner

A Python-based web application security scanner with a Tkinter GUI and optional command-line usage.

Features

• SQL injection probing
• Reflected XSS detection
• HTML injection checks
• Command injection checks
• Security header review
• WAF / rate-limit heuristics
• Port scanning for common services
• Endpoint discovery
• Authentication endpoint detection
• ML-based payload classification

Project files

• web_vulnerability_scanner.py: Scanner logic and GUI
• custom_payloads.txt: Custom payload list used by the scanner
• requirements.txt: Python dependencies

Setup

1. Create and activate a virtual environment if desired.
2. Install dependencies:

   pip install -r requirements.txt

Run the GUI

python web_vulnerability_scanner.py

Run a CLI scan

python web_vulnerability_scanner.py --target https://example.com --format json

Optional flags:

• --target: target URL to scan
• --format: output format (text or json)
• --no-headers: skip security header checks
• --no-ports: skip common port scan
• --no-waf: skip WAF check
• --no-methods: skip HTTP method checks
• --no-csrf: skip CSRF validation
• --no-discovery: skip endpoint discovery
• --no-auth: skip authentication endpoint discovery