Skip to content

VulnChk is a security tool designed to scan websites for common vulnerabilities such as SQL injection, XSS, and missing security headers. It also checks for known CVEs and provides detailed reports, helping web administrators assess and improve site security.

Notifications You must be signed in to change notification settings

MarsgameJu/VulCHK

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

21 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation


Website Vulnerability Checker

This tool scans a website for security vulnerabilities such as SQL Injection, XSS, and missing HTTP security headers. It also detects technologies used on the site and checks for known vulnerabilities (CVEs).

🚀 Installation

  1. Navigate to the project directory

    cd /path/to/project
  2. Install dependencies
    Run the following command to install the required Python packages:

    pip install requests beautifulsoup4 python-whois colorama
    pip install pyfiglet
  3. Install Gobuster
    Gobuster is an external tool that needs to be installed separately.

    • Linux (e.g., Kali Linux)

      sudo apt install gobuster
    • Windows
      Download Gobuster from GitHub and add it to your system path.

    • Install via Go (Linux/Mac/Windows)
      If you have Go installed, you can install Gobuster with:

      go install github.com/OJ/gobuster/v3@latest

      Ensure that $GOPATH/bin is in your system PATH so you can run Gobuster globally.

  4. Set the correct wordlist path
    Open main.py and update the wordlist path:

    wordlist_path = "C:/path/to/wordlist.txt"

▶️ Usage

  1. Run the script
    If your script is in a different directory, update the path in the .bat file:

    python "C:\path\to\your\script\Main.py"

    Replace C:\path\to\your\script\Main.py with the actual path to your script.

  2. Start the tool with:

    python main.py
  3. Enter the target website (including https://) to begin the scan.

📌 Features

  • Detects technologies (CMS, web server)
  • Checks for SQL Injection and Cross-Site Scripting (XSS) vulnerabilities
  • Analyzes HTTP security headers
  • Fetches known vulnerabilities from the CVE database
  • Runs Gobuster scans (if installed)
  • Retrieves WHOIS contact information

Disclaimer: This tool is for educational and ethical security testing purposes only!


About

VulnChk is a security tool designed to scan websites for common vulnerabilities such as SQL injection, XSS, and missing security headers. It also checks for known CVEs and provides detailed reports, helping web administrators assess and improve site security.

Topics

Resources

Code of conduct

Stars

Watchers

Forks

Packages

No packages published