WebSec Scanner is an automated web security scanning tool designed to identify common vulnerabilities in web applications. It helps developers and security researchers quickly assess security risks and improve application safety.
Built with a focus on speed, clarity, and actionable results, WebSec Scanner performs intelligent reconnaissance and vulnerability detection with minimal setup.
-
Automated web application vulnerability scanning
-
Intelligent reconnaissance and endpoint discovery
-
Detection of common security issues such as:
- SQL Injection
- Cross-Site Scripting (XSS)
- Security misconfigurations
- Exposed sensitive endpoints
-
Real-time scanning feedback
-
Clear and structured vulnerability reports
-
Beginner-friendly and developer-focused
- Backend: Python (Flask)
- Security Logic: Custom scanning modules
- Frontend: Web-based dashboard
- API-based architecture for scalability
- Web developers testing their applications before deployment
- Cybersecurity students learning practical web security
- Bug bounty hunters for quick reconnaissance
- College projects and hackathons
git clone https://github.com/yourusername/websec-scanner.git
cd websec-scanner
pip install -r requirements.txt
python app.py- Start the scanner server
- Enter the target URL
- Select scan options
- Run the scan and review detected vulnerabilities
- Vulnerability name
- Risk level
- Affected endpoint
- Basic remediation guidance
This tool is intended for educational and authorized security testing only. Unauthorized scanning of websites without permission is illegal. The developer is not responsible for misuse of this tool.
Code With Mehru
Full-Stack Developer | Cybersecurity Researcher
Portfolio: https://codewithmehru.netlify.app
If you find this project useful, consider giving it a ⭐ on GitHub. Contributions, issues, and feature requests are welcome.
“Security is not a feature, it’s a responsibility.”