- A web application to identify various types of vulnerabilities and secrets.
- Identify vulnerable packages present inside a repository.
- Get CVSS Score of the Repository.
- Find out Secrets like API keys and Passwords using Secret Scanner.
- Special types of scans powered by OWASP ZAP Proxy Application for open source web applications.
- Web Scans include Spider Scan, Ajax Spider Scan, Active Scan, Passive Scan.
1. React JS
2. Flask Framework
3. Beautiful Soup Library
4. Owasp ZAP Proxy Tool
- Install Stable Version of Node JS from the official website.
- Run Backend Server. (It runs on port 8000.) (To get instructions for running Backend Server refer Backend Repository of this Organization.)
- Run the following commands in main directory.
npm install
npm start
- You are good to go !
Source Project Scanner | CVE's of a Package |
---|---|
![]() |
![]() |
Files scanned by Secret Scanner | Secrets Found |
---|---|
![]() |
![]() |
Spider Scan Results | Issues found in Web App (Using Passive Scan) |
---|---|
![]() |
![]() |