{"id":50514241,"url":"https://github.com/sayan9168/sayan-sec-tool","last_synced_at":"2026-06-02T22:32:08.735Z","repository":{"id":361387669,"uuid":"1254279239","full_name":"sayan9168/sayan-sec-tool","owner":"sayan9168","description":"🔬 Advanced Web Security Research Tool for Educational Purposes | Python-based Burp Suite Alternative | CEH Learning Project | Features: Proxy, Scanner, Repeater, XSS/SQLi Detector","archived":false,"fork":false,"pushed_at":"2026-05-30T11:39:32.000Z","size":38,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-30T13:09:12.893Z","etag":null,"topics":["ceh","education","ethical-hacking","pentesting","python","security","security-tools","web-security"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sayan9168.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-05-30T11:17:52.000Z","updated_at":"2026-05-30T11:44:34.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/sayan9168/sayan-sec-tool","commit_stats":null,"previous_names":["sayan9168/sayan-sec-tool"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/sayan9168/sayan-sec-tool","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sayan9168%2Fsayan-sec-tool","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sayan9168%2Fsayan-sec-tool/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sayan9168%2Fsayan-sec-tool/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sayan9168%2Fsayan-sec-tool/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sayan9168","download_url":"https://codeload.github.com/sayan9168/sayan-sec-tool/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sayan9168%2Fsayan-sec-tool/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33840213,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-02T02:00:07.132Z","response_time":109,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ceh","education","ethical-hacking","pentesting","python","security","security-tools","web-security"],"created_at":"2026-06-02T22:32:08.002Z","updated_at":"2026-06-02T22:32:08.724Z","avatar_url":"https://github.com/sayan9168.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# 🔬 Sayan-Sec-Tool\n\n\u003e ⚠️ **EDUCATIONAL USE ONLY** | Authorized Testing Only | CEH Learning Project\n\nAdvanced web security research framework built with Python. Designed for learning ethical hacking, vulnerability assessment, and security research.\n\n## 🎯 Purpose\n- 📚 Learn web security concepts hands-on\n- 🔍 Practice vulnerability detection techniques  \n- 🧪 Research security mechanisms in controlled environments\n- 💼 Build portfolio for cybersecurity career\n\n## ⚠️ Legal Disclaimer\nThis tool is for EDUCATIONAL and RESEARCH purposes only.\n\n✅ DO:\n- Use on your own systems/labs\n- Test on intentionally vulnerable apps (DVWA, WebGoat, etc.)\n- Use in CTF competitions\n- Test with written authorization\n\n❌ DON'T:\n- Scan systems without explicit permission\n- Use for malicious purposes\n- Attack production systems\n- Violate any laws or terms of service\n\nUnauthorized access to computer systems is illegal under:\n- India: IT Act 2000, Section 43, 66\n- International: CFAA (US), Computer Misuse Act (UK), etc.\n```\n\n## 🚀 Quick Start\n\n### Prerequisites\n```bash\nPython 3.8+\npip install -r requirements.txt\n```\n\n### Usage Modes\n\n#### 🔍 Scan Mode (CLI)\n```bash\n# Basic scan with all modules\npython main.py https://target.com --all\n\n# Specific modules\npython main.py https://target.com --sqli --xss -d 2\n\n# Save report\npython main.py https://target.com --all --report\n```\n\n#### 🌐 Proxy Mode\n```bash\n# Start MITM proxy\npython main.py -m proxy -p 8080\n\n# Then configure browser:\n# Proxy: 127.0.0.1:8080\n# Install mitmproxy CA cert for HTTPS\n```\n\n#### 🖥️ GUI Mode\n```bash\npython main.py -m gui\n# Or directly:\npython -m ui.gui\n```\n\n## 📁 Project Structure\n```\nsayan-sec-tool/\n├── core/           # Core engine modules\n├── modules/        # Vulnerability detection plugins\n├── ui/             # User interface (Tkinter)\n├── config.py       # Global configuration\n├── main.py         # Entry point\n└── requirements.txt\n```\n\n## 🧩 Features\n\n### 🔐 Security Modules\n| Module | Description | Severity Levels |\n|--------|-------------|----------------|\n| `sqli_detector` | Error/Time/Union-based SQLi detection | HIGH, CRITICAL |\n| `xss_detector` | Reflected/DOM-based XSS detection | MEDIUM, HIGH |\n| `info_leak` | Sensitive data exposure detection | LOW → CRITICAL |\n\n### 🛠️ Core Capabilities\n- 🕷️ Multi-threaded web crawler\n- 🔄 Request repeater for manual testing\n- 🌐 MITM proxy with traffic analysis\n- 📊 JSON report generation\n- 🎨 Simple Tkinter GUI\n\n## 🧪 Testing Targets (Safe for Learning)\n```bash\n# Intentionally vulnerable apps:\nhttp://testphp.vulnweb.com          # Acunetix test site\nhttp://dvwa.local                    # DVWA (install locally)\nhttp://webgoat.local                 # OWASP WebGoat\nhttp://juice-shop.local             # OWASP Juice Shop\n```\n\n## 🔧 Development\n\n### Add New Module\n1. Create `modules/new_feature.py`\n2. Implement `scan(url, session) -\u003e List[Dict]`\n3. Return findings with: `type, url, severity, evidence`\n\n### Run Tests\n```bash\n# Test on local lab\npython main.py http://localhost:8000 --all --report\n\n# Check code quality\nflake8 . --count --select=E9,F63,F7,F82 --show-source\n```\n\n## 📚 Learning Resources\n- [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)\n- [PortSwigger Web Security Academy](https://portswigger.net/web-security)\n- [CEH v12 Official Curriculum](https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/)\n\n## 🤝 Contributing\nEducational contributions welcome! Please:\n1. Follow ethical guidelines\n2. Add documentation\n3. Include test cases\n4. Submit via PR\n\n## 📄 License\nMIT License - For educational use only. See LICENSE file.\n\n---\n\u003e 🎓 Built by **sayan9168** | Cisco CEH | Python Developer  \n\u003e 🔐 \"With great power comes great responsibility\"\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsayan9168%2Fsayan-sec-tool","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsayan9168%2Fsayan-sec-tool","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsayan9168%2Fsayan-sec-tool/lists"}