🧠 What ?

Pinpoint vulnerabilities with AI-enhanced precision.

isn't just another web scanner—it's your intelligent security wingman, combining rigorous traditional scanning logic with the cognitive speed of AI, doesn't just find vulnerabilities; it helps you understand them :)

❓ Why ?

not to scan, to Hunt

1. SQL Injection (SQLi)

Detection

Prevention

2. Server-Side Template Injection (SSTI)

Detection

Prevention

3. Exposed Path Discovery

Detection

Prevention

4. Cookie Security Analysis

Detection

Prevention

5. Comment Leakage

Exposed Comments

6. Surface Script Analysis

7. Pattern Decoding

8. AI-Powered Analysis

Installation

pip install dotspot

Usage

Scan a target URL

dotspot scan <target-url>

You'll be prompted to choose between vulnerability scanning or flag hunting mode.

Analyze scan results with AI

dotspot analyze <scan-report.json>

Optionally pass --api-key YOUR_KEY or set the GROQ_API_KEY environment variable.

Show help

dotspot help

Configuration

Environment Variables

Variable	Required	Default	Description
GROQ_API_KEY	✅ Yes	—	Your Groq API key for AI-powered analysis
DEFAULT_MODEL	❌ No	llama-3.3-70b-versatile	Groq model to use

Note: If GROQ_API_KEY is not set, dotSpot will skip the AI Overview phase but all other scans will work normally.

Setting up your API key

Get a free API key from console.groq.com, then:

Linux / macOS:

export GROQ_API_KEY=gsk_your_key_here

# Optional: use a different model
export DEFAULT_MODEL=llama-3.1-8b-instant

To make it permanent, add the above lines to your ~/.bashrc or ~/.zshrc.

Windows (CMD):

set GROQ_API_KEY=gsk_your_key_here
set DEFAULT_MODEL=llama-3.1-8b-instant

Windows (PowerShell):

$env:GROQ_API_KEY="gsk_your_key_here"
$env:DEFAULT_MODEL="llama-3.1-8b-instant"

Available Models

You can set DEFAULT_MODEL to any model supported by Groq. Some popular options:

Model	Description
llama-3.3-70b-versatile	Default — best quality
llama-3.1-8b-instant	Faster, lighter
openai/gpt-oss-120b	Good balance of speed and quality

See the full list at console.groq.com/docs/models.

Requirements

• Python 3.9+

License

MIT License — see LICENSE for details.