fast web application security posture and configuration auditor.
inspects target urls for common misconfigurations, security header deficiencies, insecure cookie attributes, permissive cors headers, and exposed sensitive files (.env, .git, backups, diagnostic endpoints) without intrusive active exploitation.
- security headers audit: checks hsts, content-security-policy (csp), x-frame-options, nosniff, referrer-policy, and server banner leaks
- sensitive file exposure: verifies whether
/.env,/.git/HEAD,/.git/config,docker-compose.yml,phpinfo.php,server-status, or database dumps are publicly reachable - cors misconfiguration: tests for arbitrary origin reflection, credentials reflection, and null origin trust
- cookie security: audits
HttpOnly,Secure, andSameSiteflags on session cookies - scoring & grading engine: calculates an overall security score (0-100) and letter grade (A through F)
- ci/cd friendly: optional
--fail-on-criticalflag to break pipelines when critical issues are found - rich terminal ui: colored severity tags, formatted finding details, and remediation guidance
- json export: export full audit results to structured json
git clone https://github.com/emirplus/vulnscope.git
cd vulnscope
pip install -e .or run directly with python:
python -m vulnscope example.combasic audit:
vulnscope target.comsave audit report to json:
vulnscope target.com --output report.jsonci/cd pipeline gate (exits with code 2 on critical vulnerabilities):
vulnscope target.com --fail-on-criticalcustom timeout:
vulnscope target.com --timeout 10.0interactive mode:
vulnscopevulnscope v0.1.0 - web security posture & configuration auditor
[*] Auditing target: target.com...
╭────────────────────────────── Audit Overview ──────────────────────────────╮
│ Security Score: 55/100 | Grade: [C] | Target: https://target.com (210.4ms) │
╰────────────────────────────────────────────────────────────────────────────╯
Findings (4 issues detected)
┏━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ Severity ┃ Category ┃ Finding & Remediation ┃
┡━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┩
│ CRITICAL │ Information │ Exposed Environment Configuration File (.env) │
│ │ Disclosure │ Publicly accessible sensitive file found at .env │
│ │ │ Fix: Block access to hidden files │
├──────────────┼──────────────────┼──────────────────────────────────────────────────┤
│ HIGH │ Headers │ Missing Strict-Transport-Security Header (HSTS) │
│ │ │ Browser can be tricked into plaintext HTTP │
│ │ │ Fix: Add 'Strict-Transport-Security' header │
├──────────────┼──────────────────┼──────────────────────────────────────────────────┤
│ HIGH │ Headers │ Missing Content-Security-Policy (CSP) │
│ │ │ No Content Security Policy detected │
│ │ │ Fix: Implement a strict CSP │
├──────────────┼──────────────────┼──────────────────────────────────────────────────┤
│ MEDIUM │ Session │ Cookie Lacks HttpOnly Flag (session_id) │
│ │ Management │ Cookie can be read by client-side scripts │
│ │ │ Fix: Add HttpOnly attribute to 'session_id' │
└──────────────┴──────────────────┴────────────────━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┘
╭──────────────────────────── Severity Breakdown ────────────────────────────╮
│ Critical: 1 | High: 2 | Medium: 1 | Low: 0 | Info: 0 │
╰────────────────────────────────────────────────────────────────────────────╯
usage: vulnscope [-h] [-o OUTPUT] [-t TIMEOUT] [--fail-on-critical] [-v] [target]
positional arguments:
target target url or domain (e.g. example.com)
options:
-h, --help show this help message and exit
-o, --output OUTPUT save audit report to json file
-t, --timeout TIMEOUT http request timeout in seconds (default: 5.0)
--fail-on-critical exit with status code 2 if critical issues are found
-v, --version show program's version number and exit
MIT