VulnScan
VulnScan is a powerful and lightweight Web Penetration Testing Toolkit developed over 3 years of research, crafted to assist ethical hackers, security researchers, and developers in identifying web application vulnerabilities quickly and efficiently.
Built with passion. Backed by real-world interviews. Recognized by industry leaders.
Features
VulnScan currently includes 25 powerful modules:
-
Change Target Domain
- Function:
ensure_url_scheme
- Function:
-
Port Scanning
- Functions:
scan_single_port,scan_custom_ports,scan_range_of_ports
- Functions:
-
Domain Enumeration
- Functions:
from_file,check_subdomain,append_if_exists,get_active
- Functions:
-
Domain Fingerprinting
- Function:
get_server_info
- Function:
-
SQL Injection Testing
- Functions:
is_vulnerable,test_sql_injection
- Functions:
-
Cross-Site Scripting (XSS) Testing
- Functions:
get_forms,form_details,submit_form,scan_xss
- Functions:
-
CSRF Detection
- Function:
csrf
- Function:
-
SSL/TLS Certificate Detection
- Functions:
certificate,analyze_certificate
- Functions:
-
Server Geolocation
- Function:
get_location
- Function:
-
Directory Enumeration
- Function:
directory_enumeration
- Function:
-
Web Application Vulnerability Scanning
- Function:
web_application_vulnerability_scanner
- Function:
-
Crawling and Spidering
- Function:
crawl_and_spider
- Function:
-
WAF Detection
- Function:
detect_waf
- Function:
Advanced Modules
-
Advanced Domain Enumeration
- Class:
AdvancedSubdomainEnumerator - Method:
run_enumeration
- Class:
-
Cloud Vulnerability Scan
- Class:
CloudSecurityScanner - Method:
run_scan
- Class:
-
Advanced Web Application Scan
- Class:
AdvancedWebAppTester - Method:
run_tests
- Class:
-
API Security Testing
- Classes:
GraphQLSecurityTester,APISecurityTester - Methods:
run_tests
- Classes:
-
AI-Powered Vulnerability Detection
- Class:
AIVulnerabilityDetector - Method:
analyze_response
- Class:
-
Comprehensive Security Scan
- Function:
run_comprehensive_scan
- Function:
-
Security Tool Integration
- Class:
SecurityToolIntegration - Method:
export_all
- Class:
-
Advanced Report Generation
- Class:
AdvancedSecurityReporter - Method:
generate_all_reports
- Class:
-
Sensitive Data Exposure Check
- Class:
SensitiveDataExposureTester - Method:
check_sensitive_data
- Class:
-
Wireless Controller Scan (WLC)
- Class:
WirelessControllerScanner - Method:
run_tests
- Class:
-
WSN/IoT API Auditor (5G Core)
- Class:
WSNApiAuditor - Method:
run_tests
- Class:
-
Exit
Each module is plug-and-play and optimized for fast, accurate results.
v3.4.8 "Production Level" Upgrades
- Real-Time Logging: Findings are streamed instantly to the console as they are discovered.
- Parallel Scanning: All modules run concurrently for maximum speed.
- Robustness: Automatic retries for network requests and resilient public DNS resolution (Google/Cloudflare).
- Stealth: User-Agent rotation to evade basic WAFs and bot detection.
- Enhanced Detection: Improved regex patterns for secrets (Slack, GitHub, AWS) and PII.
Installation
git clone https://github.com/gokulkannanganesamoorthy/vulnscan.git
cd vulnscan
pip install -r requirements.txt
python pdf_vulnscan_updated.py
1 maintainer
Metadata
1 maintainer
Release files for vulnscan 3.4.8
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| vulnscan-3.4.8.tar.gz | 84.6 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| vulnscan-3.4.8-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 178.1 kB
Release files / vulnscan-3.4.8.tar.gz
| Download URL | vulnscan-3.4.8.tar.gz |
|---|---|
| Size | 84.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c7a64dcdcb47104f02c50d0c8c1cc0685c60615942416ec9f9f03cb05580cfaf
|
|
BLAKE2b-256 checksum How to use checksums |
44a0da0547e6c631a80408e4e06496b3d9847b3d087c517ed059a08d4dd6104c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.11.1
|
Release files / vulnscan-3.4.8-py3-none-any.whl
| Download URL | vulnscan-3.4.8-py3-none-any.whl |
|---|---|
| Size | 93.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
0c22c74cd4ee0b51b64c9e2b315154eeb158270beb7f503e7d5e3db0a3fca3db
|
|
BLAKE2b-256 checksum How to use checksums |
da2dcf98b3999bfcb3942bc63aa2909fdbabbd81ea413ad06db96ba168f7f221
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.11.1
|
Security for vulnscan 3.4.8
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
