An open API service indexing awesome lists of open source software.

https://github.com/avi9611/vulnerabilitydetection

This project is a security-focused system designed to improve the safety of web applications by identifying and mitigating common vulnerabilities like SQL injection, weak passwords, and malicious file uploads. The system uses Python and Flask for backend services, MySQL for data management, and features a user-friendly web interface.
https://github.com/avi9611/vulnerabilitydetection

bootstrap5 flask html5 javascript mysql mysqlworkbench python3

Last synced: 12 months ago
JSON representation

This project is a security-focused system designed to improve the safety of web applications by identifying and mitigating common vulnerabilities like SQL injection, weak passwords, and malicious file uploads. The system uses Python and Flask for backend services, MySQL for data management, and features a user-friendly web interface.

Awesome Lists containing this project

README

          

# Vulnerability-detection-SQL-injection-

Vulnerability Detection System
This project is a security-focused system designed to improve the safety of web applications by identifying and mitigating common vulnerabilities like SQL injection, weak passwords, and malicious file uploads. The system uses Python and Flask for backend services, MySQL for data management, and features a user-friendly web interface.

Key Features
SQL Injection Detection:

Real-time detection and prevention.
Input validation and sanitization.
Logs details including IP address and browser details upon detection.
Password Strength Recommendation:

Provides feedback on password strength based on complexity rules.
Visual strength meter to guide users in choosing stronger passwords.
Malicious File Upload Detection:

Scans and restricts certain file types.
Prevents uploading of potentially harmful files.
Real-Time Monitoring:

Comprehensive logging for SQL injection attempts and other attacks.
Browser, IP address, and location details recorded for each detected attack.
Technologies Used
Frontend: HTML, CSS, JavaScript
Backend: Flask, Python, MySQL
Tools: Postman for API testing, ngrok for secure tunnel testing
Installation
Prerequisites:

Python 3.8 or higher
MySQL server
Flask and other required Python libraries (requirements.txt)
Setting Up:

bash
Copy code
pip install -r requirements.txt
Configure MySQL database as per the structure provided in the documentation.
Running the Application:

bash
Copy code
python app.py
Access the application at http://localhost:5000.
Usage
User Registration and Login:

Register a new user account with secure password creation feedback.
Log in with your credentials to access the main dashboard.
File Upload:

Upload files with real-time security checks.
Viewing Logs:

SQL injection attempts and other security logs are available for monitoring.
Testing
Unit tests for password strength, input validation, and SQL injection detection are available.
Use pytest to run all tests:
bash
Copy code
pytest
Postman collections are provided for testing API responses.
Future Enhancements
Integration with AI for improved threat detection.
Expanded authentication with multi-factor support.
Enhanced user interface for better usability.