Share
## https://sploitus.com/exploit?id=F823D34F-A714-5EE7-9DAD-FCE71C5890F2
# ๐ก๏ธ CPVST - Cyber Prince Vulnerability Scanner Tool
**Advanced Automated Vulnerability Scanner for Web Applications**
[](https://github.com/cyberprince/cpvst)
*Click the GIF to view full demonstration*
## ๐ Overview
CPVST (Cyber Prince Vulnerability Scanner Tool) is an advanced, automated security scanning tool designed to identify critical vulnerabilities in web applications. With support for custom payloads and multiple scanning techniques, CPVST helps security professionals and developers strengthen their web application security.
## โจ Features
### ๐ Vulnerability Detection
- **XSS** (Cross-Site Scripting) detection with DOM-based and reflected XSS testing
- **RCE** (Remote Code Execution) command injection identification
- **LFI** (Local File Inclusion) path traversal detection
- **Open Redirect** validation bypass testing
### โก Advanced Capabilities
- ๐ **Adjustable Scan Speed** (5 levels from careful to aggressive)
- ๐ **Custom Payload Support** - Use your own payload collections
- ๐ **Verbose Mode** - Real-time scanning output
- ๐พ **Results Export** - Save findings in multiple formats
- โ๏ธ **Configurable Settings** - JSON-based configuration
- ๐ **HTML Reports** - Professional vulnerability reports
- ๐ **Batch Processing** - Scan multiple targets simultaneously
## ๐ Quick Start
### Prerequisites
- Python 3.8 or higher
- pip (Python package manager)
### Installation
```bash
# Clone the repository
git clone https://github.com/cyberprince/cpvst.git
cd cpvst
# Install dependencies
pip install -r requirements.txt
# Verify installation
python src/scanner.py --help
Basic Usage
# Scan a single URL for all vulnerabilities
python src/scanner.py -u http://testphp.vulnweb.com -a
# Scan for specific vulnerabilities
python src/scanner.py -u http://testphp.vulnweb.com -x -l # XSS and LFI only
# Scan multiple URLs from a file
python src/scanner.py -f targets.txt -a -O results.txt
# Advanced scan with custom settings
python src/scanner.py -u http://testphp.vulnweb.com -a -s 5 -v -t 20
Custom Payloads
# Custom XSS payloads
echo "">alert('CUSTOM_XSS')" > payloads/xss_custom.txt
# Use custom payloads
python src/scanner.py -u http://example.com -x -p payloads/xss_custom.txt
Project Structure
cpvst/
โโโ src/ # Source code
โ โโโ __init__.py # Package initialization
โ โโโ scanner.py # Main scanner controller
โ โโโ modules.py # Vulnerability testing modules
โ โโโ utils.py # Utility functions
โโโ payloads/ # Payload collections
โ โโโ xss_payloads.txt # XSS payloads
โ โโโ rce_payloads.txt # RCE payloads
โ โโโ lfi_payloads.txt # LFI payloads
โ โโโ redirect_payloads.txt # Open redirect payloads
โโโ tests/ # Test cases
โโโ docs/ # Documentation & assets
โโโ results/ # Scan results output
โโโ config.json # Configuration file
โโโ requirements.txt # Python dependencies
โโโ README.md # This file
โ๏ธ Command Line Options
Option Description Example
-u, --url Target URL -u http://example.com
-f, --file File containing URLs -f targets.txt
-x, --xss Test for XSS vulnerabilities -x
-r, --rce Test for RCE vulnerabilities -r
-l, --lfi Test for LFI vulnerabilities -l
-o, --open-redirect Test for Open Redirect vulnerabilities -o
-a, --all Test for all vulnerabilities -a
-s, --speed Scan speed (1-5) -s 4
-v, --verbose Verbose output -v
-t, --timeout Request timeout (seconds) -t 20
-p, --payload-dir Custom payload directory -p my_payloads
-O, --output Output results file -O scan_results.html
--proxy Use HTTP proxy --proxy http://proxy:8080