{"id":26600396,"url":"https://github.com/rutaganda-salim/web-guardian","last_synced_at":"2025-03-23T18:18:45.231Z","repository":{"id":283508164,"uuid":"951997847","full_name":"rutaganda-salim/web-guardian","owner":"rutaganda-salim","description":"The Multi-Tool Web Vulnerability Scanner.","archived":false,"fork":false,"pushed_at":"2025-03-20T15:39:38.000Z","size":52,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-20T16:35:00.499Z","etag":null,"topics":["penetration-testing","scanner-web","vulnerability-scanners","web-guardian"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rutaganda-salim.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-03-20T15:13:09.000Z","updated_at":"2025-03-20T15:39:42.000Z","dependencies_parsed_at":"2025-03-20T16:35:42.629Z","dependency_job_id":"09f62b47-2d54-4914-9bc8-ba39be77dc08","html_url":"https://github.com/rutaganda-salim/web-guardian","commit_stats":null,"previous_names":["rutaganda-salim/web-guardian"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rutaganda-salim%2Fweb-guardian","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rutaganda-salim%2Fweb-guardian/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rutaganda-salim%2Fweb-guardian/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rutaganda-salim%2Fweb-guardian/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rutaganda-salim","download_url":"https://codeload.github.com/rutaganda-salim/web-guardian/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":245144976,"owners_count":20568056,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["penetration-testing","scanner-web","vulnerability-scanners","web-guardian"],"created_at":"2025-03-23T18:18:44.609Z","updated_at":"2025-03-23T18:18:45.152Z","avatar_url":"https://github.com/rutaganda-salim.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"## 🟥 WebGuardian v0.1 - The Multi-Tool Web Vulnerability Scanner\n\n### Evolution\n\nIt is quite a fuss for a pentester to perform binge-tool-scanning (running security scanning tools one after the other) sans automation. Unless you are a pro at automating stuff, it is a herculean task to perform binge-scan for each and every engagement. The ultimate goal of this program is to solve this problem through automation; viz. running multiple scanning tools to discover vulnerabilities, effectively judge false-positives, collectively correlate results and saves precious time; all these under one roof.\n\nEnter WebGuardian.\n\n### Features\n\n- One-step installation.\n- Executes a multitude of security scanning tools, does other custom coded checks and prints the results spontaneously.\n- Some of the tools include nmap, dnsrecon, wafw00f, uniscan, sslyze, fierce, lbd, theharvester, amass, nikto etc executes under one entity.\n- Saves a lot of time, indeed a lot time!\n- Checks for same vulnerabilities with multiple tools to help you zero-in on false positives effectively.\n- Extremely light-weight and not process intensive.\n- Legends to help you understand which tests may take longer time, so you can Ctrl+C to skip if needed.\n- Association with OWASP Top 10 \u0026 CWE 25 on the list of vulnerabilities discovered. (under development)\n- Critical, high, medium, low and informational classification of vulnerabilities.\n- Vulnerability definitions guides you what the vulnerability actually is and the threat it can pose.\n- Remediation tells you how to plug/fix the found vulnerability.\n- Executive summary gives you an overall context of the scan performed with critical, high, low and informational issues discovered.\n- Artificial intelligence to deploy tools automatically depending upon the issues found. For example, automates the launch of wpscan and plecost tools when a WordPress installation is found. (under development)\n- Detailed comprehensive report in a portable document format (\\*.pdf) with complete details of the scans and tools used. (under development)\n- On the run metasploit auxiliary modules to discover more vulnerabilities. (under development)\n\n### Vulnerability Checks\n\n- ✔️ DNS/HTTP Load Balancers \u0026 Web Application Firewalls.\n- ✔️ Checks for Joomla, WordPress and Drupal.\n- ✔️ SSL related Vulnerabilities (HEARTBLEED, FREAK, POODLE, CCS Injection, LOGJAM, OCSP Stapling).\n- ✔️ Commonly Opened Ports.\n- ✔️ DNS Zone Transfers using multiple tools (Fierce, DNSWalk, DNSRecon, DNSEnum).\n- ✔️ Sub-Domains Brute Forcing (DNSMap, amass, nikto).\n- ✔️ Open Directory/File Brute Forcing.\n- ✔️ Shallow XSS, SQLi and BSQLi Banners.\n- ✔️ Slow-Loris DoS Attack, LFI (Local File Inclusion), RFI (Remote File Inclusion) \u0026 RCE (Remote Code Execution).\n- \u0026 more coming up...\n\n### Requirements\n\n- Python 3\n- Kali OS (Preferred, as it is shipped with almost all the tools)\n- Tested with Parrot \u0026 Ubuntu Operating Systems.\n\n### Installation\n\n```bash\ngit clone https://github.com/rutaganda-salim/web-guardian.git /opt/\ncd /opt/rapidscan\npython3 -m pip install .\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frutaganda-salim%2Fweb-guardian","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frutaganda-salim%2Fweb-guardian","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frutaganda-salim%2Fweb-guardian/lists"}