VulnScan

web vulnerability assessment · v0.3.1

Find what's broken.
Before they do.

Passive web vulnerability scanner for OWASP Top 10 coverage — XSS probes, SQLi signatures, security headers, TLS posture, and CSP analysis. Built during my SecurDI junior analyst internship for internal test targets.

target ›
OWASP Coverage
10/10
Avg. Findings / Scan
6.4
Security Grade
C

Scan Output

— awaiting scan —
ready
press ▶ Scan to begin. output will stream here line by line.

Severity Distribution

Findings grouped by CVSS severity
CRIT
0
HIGH
0
MED
0
LOW
0
INFO
0

Scan Profile

Choose a preset before launching
quick~3s · headers only
full~12s · everything
owasp-top-10~8s · cwe-coverage
api-modecors + auth
Passive checks only against arbitrary targets. Active modules (XSS/SQLi) render payloads without sending for legal reasons.

Findings

Issues discovered this run · click CWE for reference
No scan yet — run one above.