Security Analyzer

🐍 A large scale web crawler (considered also as vulnerability scanner tool) to take an overview about security of Moroccan sites

Current architecture / Workflow:

Implemented defence mechanisms scanners:

• X-Frame-Options
• HTTP Strict-Transport-Security
• X-Content-Type-Options
• Secure cookies
• HttpOnly cookies
• CSRF Tokens
• Content security policy
• Iframe sandboxing

Implemented vulnerabilities scanners:

• X-XSS-Protection
• Mixed-content inclusions
• Vulnerable remote JavaScript inclusion
• SSL-stripping Vulnerable Form
• Outdated Server Software -
• Outdated CMS
• Sensitive files
• HTTP Parameter Pollution
• Information leakage
• Insecure SSL implementation

Usage

Check the examples in the demos folder

featured_repository