Share
## https://sploitus.com/exploit?id=407BAB03-2C43-5C0E-922D-04F1ACB36EAA
# Python Vulnerability Scanner
## Overview
A Python-based web vulnerability scanner that checks for OWASP Top 10 vulnerabilities. Generates clean HTML reports with severity ratings, OWASP references, and remediation guidance. Tested against DVWA (Damn Vulnerable Web App).
Built to demonstrate application security skills relevant to the Australian cybersecurity market โ combining development and security knowledge.
---
## Features
| Check | OWASP Category | Severity |
| -------------------------- | ------------------------------------ | -------- |
| SQL Injection | A03:2021 โ Injection | Critical |
| Cross-Site Scripting (XSS) | A03:2021 โ Injection | High |
| Open Port Detection | A05:2021 โ Security Misconfiguration | High |
| Missing Security Headers | A05:2021 โ Security Misconfiguration | Medium |
| Directory Traversal | A01:2021 โ Broken Access Control | Critical |
---
## Quick Start
### Run with Python
```bash
git clone https://github.com/mdfadhih/python-vuln-scanner.git
cd python-vuln-scanner
pip install -r requirements.txt
python scanner/main.py --target http://localhost --output html
```
### Run with Docker
```bash
docker build -t vuln-scanner .
docker run vuln-scanner --target http://localhost --output html
```
### Run against DVWA (test target)
```bash
# Start DVWA
docker run -d -p 80:80 vulnerables/web-dvwa
# Run scanner
python scanner/main.py --target http://localhost --output html
```
---
## Sample Output
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ Python Vulnerability Scanner โ
โ Author: Mohamed Fadhih โ
โ OWASP Top 10 | v1.0 โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
[*] Target: http://localhost
[*] Starting scan...
[*] Check 1/5: SQL Injection (OWASP A03)...
[CRITICAL] SQL Injection found: http://localhost/vulnerabilities/sqli/?id='
[*] Check 2/5: Cross-Site Scripting (OWASP A03)...
[HIGH] XSS vulnerability found: http://localhost/vulnerabilities/xss_r/?name=alert('XSS')
[*] Check 3/5: Open Ports (OWASP A05)...
[HIGH] Port 445/SMB is open
[*] Check 4/5: Security Headers (OWASP A05)...
[HIGH] Missing header: Strict-Transport-Security
[MEDIUM] Missing header: Content-Security-Policy
[*] Check 5/5: Directory Traversal (OWASP A01)...
[CRITICAL] Directory traversal found: http://localhost/vulnerabilities/fi/?page=../../../etc/passwd
[+] Scan Complete!
Critical : 2
High : 3
Medium : 2
Low : 1
Total : 8
[+] Report saved: reports/scan_report_20260610_120000.html
```
---
## HTML Report
The scanner generates a clean HTML report with:
- Severity-coloured findings (Critical/High/Medium/Low)
- OWASP Top 10 reference for each finding
- Full URL and payload used
- Remediation guidance for each vulnerability
- Summary metrics dashboard
See `/reports` folder for sample scan output.
---
## Project Structure
```
python-vuln-scanner/
โโโ scanner/
โ โโโ __init__.py
โ โโโ main.py โ entry point + CLI
โ โโโ sql_injection.py โ SQL injection checks
โ โโโ xss.py โ XSS checks
โ โโโ open_ports.py โ port scanning
โ โโโ headers.py โ security header checks
โ โโโ directory.py โ directory traversal checks
โ โโโ report.py โ HTML/JSON report generator
โโโ reports/ โ scan output saved here
โโโ tests/
โ โโโ test_scanner.py โ pytest unit tests
โโโ .github/
โ โโโ workflows/
โ โโโ scan.yml โ GitHub Actions CI
โโโ Dockerfile
โโโ requirements.txt
โโโ README.md
```
---
## CI/CD Pipeline
GitHub Actions runs on every push:
1. Spins up DVWA as a service container
2. Runs pytest unit tests
3. Executes full scan against DVWA
4. Uploads HTML report as artifact
---
## Ethical Use
This tool is for authorised security testing only. Only scan systems you own or have explicit written permission to test. The author accepts no liability for misuse.
---
## Dependencies
| Package | Purpose |
| -------------- | -------------------------- |
| requests | HTTP requests for scanning |
| beautifulsoup4 | HTML parsing |
| python-nmap | Port scanning |
| jinja2 | HTML report templating |
| colorama | Terminal colours |
---
## About
**Mohamed Fadhih** โ Cybersecurity Analyst | Melbourne, Australia
- Master of Cybersecurity โ Monash University
- AWS Certified Cloud Practitioner
- Google Cybersecurity Professional Certificate
[](https://linkedin.com/in/fadhih)
[](https://github.com/mdfadhih/soc-lab-threat-detection)
[](https://github.com/mdfadhih/home-soc-lab)