WebSentry is a lightweight, comprehensive web application vulnerability scanner designed for ethical security testing. It combines a robust Python backend for scanning logic with a responsive HTML/JS frontend for an intuitive user experience.
> **- Vulnerability Detection: Scans for common web vulnerabilities including:
- Cross-Site Scripting (Reflected & Stored XSS)
- SQL Injection (SQLi)
- Open Redirects
- Local File Inclusion (LFI)
- Exposed Sensitive Files (git, env, backups)
- Security Header Analysis: Checks for missing or misconfigured HTTP security headers (CSP, HSTS, X-Frame-Options, etc.).
- Interactive Reports: Generates detailed JSON logs and displays real-time scan results in the dashboard.
- Cross-Platform: Runs seamlessly on Linux, Windows, and macOS.
WebSentry/
├── index.html # Main dashboard interface
├── script.js # Frontend logic and API communication
├── styles.css # Custom styling
├── scanner.py # Python backend server and scanning engine
├── run.sh # Linux/Mac launch script
├── run.bat # Windows launch script
├── requirements.txt # Python dependencies
└── scan_logs/ # Directory for saved scan reports
- Python 3.8+
- pip (Python package manager)
- A modern web browser
-
Clone the repository (or download source):
git clone https://github.com/vision-dev1/Websentry.git cd Websentry -
Install Dependencies:
pip install -r requirements.txt
Make the script executable and run it:
chmod +x run.sh
./run.shDouble-click run.bat or run via command prompt:
run.bat- Start the Python backend:
python scanner.py
- Open
index.htmlin your browser (or follow the URL provided by the backend, usuallyhttp://localhost:5000or file-based access depending on configuration).
The interface features a modern, dark-themed design with real-time progress indicators, severity coding (High/Medium/Low), and exportable reports.
This project is licensed under the MIT License - see the LICENSE file for details.
