{"id":25131987,"url":"https://github.com/taleblou/urlvulnerabilityscanner_winapp","last_synced_at":"2025-04-03T00:11:47.891Z","repository":{"id":272784540,"uuid":"917752258","full_name":"taleblou/URLVulnerabilityScanner_WinApp","owner":"taleblou","description":"Penetration and Vulnerability Scanner is a Windows Forms app for security analysis. It detects vulnerabilities like SQL Injection, XSS, open directories, CSRF, and more. Designed for developers and security pros to identify and mitigate risks in web applications.","archived":false,"fork":false,"pushed_at":"2025-01-16T15:28:27.000Z","size":14,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-08T14:16:10.599Z","etag":null,"topics":["penetration","penetration-4","scanner"],"latest_commit_sha":null,"homepage":"https://taleblou.ir/","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/taleblou.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-01-16T15:27:03.000Z","updated_at":"2025-01-16T15:29:09.000Z","dependencies_parsed_at":"2025-01-16T16:51:55.418Z","dependency_job_id":"e155d972-eb64-4694-9700-d059d9c8906f","html_url":"https://github.com/taleblou/URLVulnerabilityScanner_WinApp","commit_stats":null,"previous_names":["taleblou/urlvulnerabilityscanner_winapp"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/taleblou%2FURLVulnerabilityScanner_WinApp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/taleblou%2FURLVulnerabilityScanner_WinApp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/taleblou%2FURLVulnerabilityScanner_WinApp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/taleblou%2FURLVulnerabilityScanner_WinApp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/taleblou","download_url":"https://codeload.github.com/taleblou/URLVulnerabilityScanner_WinApp/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246911471,"owners_count":20853657,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["penetration","penetration-4","scanner"],"created_at":"2025-02-08T14:16:14.761Z","updated_at":"2025-04-03T00:11:47.869Z","avatar_url":"https://github.com/taleblou.png","language":"C#","funding_links":[],"categories":[],"sub_categories":[],"readme":"# **Penetration and Vulnerability Scanner**\n\n## **Overview**\n\nThe **Penetration and Vulnerability Scanner** is a Windows Forms application written in C\\#. It provides security analysis for web applications by scanning for various vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), open directories, subdomain enumeration, and more. This tool is designed to help developers and security professionals identify and mitigate potential risks in their web applications.\n\n## **Features**\n\nThe application includes the following vulnerability checks:\n\n1. **SQL Injection** \\- Detects injection points that could allow unauthorized database access.  \n2. **Cross-Site Scripting (XSS)** \\- Identifies potential XSS vulnerabilities.  \n3. **Open Directories** \\- Scans for directory indexing and exposed directories.  \n4. **Subdomain Enumeration** \\- Discovers accessible subdomains of the target URL.  \n5. **Security Headers** \\- Checks for the presence of critical security headers.  \n6. **Command Injection** \\- Detects command injection vulnerabilities.  \n7. **Cross-Site Request Forgery (CSRF)** \\- Identifies forms lacking CSRF tokens.  \n8. **Open Redirects** \\- Finds potential open redirect vulnerabilities.  \n9. **File Upload Vulnerability** \\- Tests for improper file upload handling.  \n10. **Directory Enumeration** \\- Scans for common directories that might be exposed.  \n11. **Weak Session Management** \\- Checks for missing `HttpOnly` and `Secure` cookie flags.  \n12. **Exposed API Endpoints** \\- Identifies accessible and insecure API endpoints.  \n13. **Access Control Flaws** \\- Detects unauthorized access to restricted URLs.  \n14. **Parameter Tampering** \\- Tests for improper handling of tampered parameters.  \n15. **Rate Limiting** \\- Checks for missing rate limiting protections.  \n16. **SSL/TLS Configuration** \\- Validates SSL/TLS settings and certificate issues.  \n17. **Port Scanning** \\- Scans for open ports on the target.  \n18. **Endpoint Verification** \\- Checks the accessibility of specific endpoints.\n\n## **Requirements**\n\n* **Operating System:** Windows  \n* **Framework:** .NET Framework 4.5 or higher  \n* **Dependencies:** None (all required libraries are part of the .NET Framework)\n\n## **Installation**\n\n1. Clone or download this repository.  \n2. Open the solution in Visual Studio.  \n3. Build the solution to restore all dependencies.  \n4. Run the application from Visual Studio or publish it for deployment.\n\n## **How to Use**\n\n1. Launch the application.  \n2. Enter the target URL in the input field.  \n3. Click the **Scan** button to start scanning the target.  \n4. Save the output to a CSV file using the provided file dialog.  \n5. View results in the application interface or in the saved file.\n\n## **Output**\n\nThe results of the scans are displayed in the application and can also be saved as a CSV file. Each vulnerability detected is listed with details about the issue and the specific payloads or conditions that triggered it.\n\n## **Important Notes**\n\n* This tool is intended for ethical use only. Ensure you have proper authorization before scanning any URL.  \n* The results are indicative and should be verified manually for accuracy.  \n* Some checks may generate false positives or negatives depending on the target's implementation.\n\n## **Contributing**\n\nFeel free to contribute by submitting issues or pull requests. Ensure you adhere to ethical practices when using or developing this tool.\n\n## **License**\n\nThis project is licensed under the MIT License.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftaleblou%2Furlvulnerabilityscanner_winapp","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftaleblou%2Furlvulnerabilityscanner_winapp","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftaleblou%2Furlvulnerabilityscanner_winapp/lists"}