The Web Vulnerability Scanner is a comprehensive tool designed to identify various vulnerabilities in web applications. It includes scanners for common vulnerabilities such as Cross-Site Scripting (XSS), SQL Injection, Cross-Site Request Forgery (CSRF), SSL/TLS configuration issues, and security header misconfigurations.
- XSS Scanner: Detects potential Cross-Site Scripting vulnerabilities.
- SQL Injection Scanner: Identifies SQL injection vulnerabilities.
- CSRF Scanner: Checks for Cross-Site Request Forgery vulnerabilities.
- SSL Scanner: Evaluates the SSL/TLS configuration of the target application.
- Header Scanner: Analyzes security headers and their configurations.
- Install the dependencies:
npm install
To run the vulnerability scanner, execute the following command:
npm startMake sure to replace ts-node with the appropriate command if you are using a different TypeScript execution method.
You can configure the scanner settings in the src/config/scannerConfig.ts file. Adjust the timeout settings and target URLs as needed.