Releases: eminemahjoub/malware-scanner
Release 1.0 - Website Security Scanner
Features:
URL Validation: Ensure that the provided URL is valid.
Link Scanning: Scan a website and find all links while sanitizing them to prevent cross-site scripting (XSS) attacks.
Malware Scan: Check the provided URL for malware using ClamAV.
Configuration Files Check: Detect common sensitive configuration files like robots.txt, .htaccess, wp-config.php, config.php, and web.config.
SQL Injection Test: Perform a simple SQL injection test on a provided URL.
PDF Report Generation: Generate a PDF report summarizing the findings of the scan, including links, malware scan results, and configuration files.
How to Use:
Enter the website URL to scan.
The tool scans the website for links, performs a malware scan, and checks for common configuration files.
An SQL injection test is also performed.
A PDF report is generated with the scan results.
Upcoming Features (In Progress):
User-friendly interactive mode.
Customization options for scanning parameters.
Parallel scanning for faster results.
Enhanced vulnerability scanning (XSS, CSRF, etc.).
Integration with other security tools.
Improved error handling and reporting.
Stay tuned for more updates and enhancements in future releases!
Important Note:
This release does not include the ExploitDB integration, which is an upcoming feature. If you have any further feature requests or feedback, please feel free to share them.
Release Description: v1.0 - Enhanced Security Scanner with ExploitDB Integration
Overview:
This release marks a significant milestone in enhancing the capabilities of our website security scanner. We have integrated the ExploitDB API to provide users with a comprehensive view of potential security risks and associated exploits related to a target website. This addition, along with existing features, empowers security professionals and web administrators to better protect their web assets.
Key Features and Enhancements:
Website Scanning: The core functionality of the scanner remains intact. Users can input a website URL for the scanner to analyze, find all links, sanitize them to prevent XSS attacks, and check for common configuration files.
Malware Scanning: The scanner can now identify potential malware on the target website using ClamAV. If malware is detected, it provides detailed information to aid in remediation.
ExploitDB Integration: A major highlight of this release is the integration with ExploitDB, a widely recognized repository of known exploits. Users can search for related exploits by providing the website URL. The scanner queries the ExploitDB API and presents a list of exploits that could potentially target the website.
Usage Instructions:
Run the scanner by providing the target website URL.
Select optional features such as malware scanning or checking for common configuration files.
If you wish to search for related exploits, choose the "Search for related exploits" option and input the website URL. The scanner will fetch relevant exploit information from ExploitDB.
Customization and Flexibility:
Users can customize the scanner by providing custom headers for HTTP requests, allowing for greater flexibility in the scanning process.
The scanner also supports input validation testing to identify potential vulnerabilities in forms and input fields.
Next Steps:
The current release represents a significant step forward in website security scanning. In future releases, we plan to further expand the scanner's capabilities by incorporating more advanced vulnerability scanning techniques, authentication support, and improved reporting features to provide a comprehensive security assessment of web assets.
Thank you for using our enhanced security scanner, and we welcome your feedback and contributions to continue improving this tool.