WebTest - Enhanced Web Security Scanner

A comprehensive web security scanner with advanced file leak detection, confidence scoring, and forensic analysis capabilities.

🚀 Quick Start

Installation via Homebrew

# Install the tap
brew tap smundhra-git/explain

# Install webtest
brew install webtest

Verify Installation

# Check version
webtest --version

# Get help
webtest --help

🎯 Usage

Basic Scan

webtest https://example.com

Full Security Scan

webtest --full https://example.com

Generate HTML Report

webtest --full --output report.html https://example.com

Advanced Options

webtest --full \
  --timeout 60 \
  --threads 20 \
  --verbose \
  --output detailed_report.html \
  https://example.com

✨ Features

🔍 Enhanced File Leak Detection

• Confidence scoring (0-100%) for accurate results
• Baseline 404 detection to eliminate false positives
• Regex-based pattern matching for better detection
• Automatic quarantine of real leaks for forensic analysis

🛡️ Comprehensive Security Checks

• Directory Enumeration - Find sensitive directories and files
• Information Leakage - Detect exposed configuration files
• SSL/TLS Configuration - Check certificate and encryption
• Security Headers - Verify security header implementation
• CORS Configuration - Test cross-origin resource sharing
• Server Fingerprinting - Identify server technologies
• DDoS Protection - Test rate limiting and WAF
• XSS Vulnerabilities - Detect reflected XSS
• Open Redirects - Find redirect vulnerabilities
• CSRF Protection - Check form security
• JavaScript Libraries - Identify outdated libraries
• Subdomain Enumeration - Discover subdomains

📊 Advanced Reporting

• Real-time progress with rich terminal output
• HTML reports with detailed findings
• Severity classification (Critical, High, Medium, Low, Info)
• Evidence collection for each finding

🎯 Detection Examples

✅ Real Leak Detection

.env → ✅ Real leak [confidence: 95%] → Contains DB credentials
web.config → ✅ Real leak [confidence: 92%] → Contains <configuration> tags

⚠️ False Positive Detection

config.php → ✅ False positive [confidence: 94%] → 200 OK but no sensitive content

🔒 Protected File Detection

admin/ → ✅ Exists but access denied (safe)

📁 Leak Quarantine

Real file leaks are automatically quarantined for forensic analysis:

leaks/
├── files/          # Quarantined leak files
└── metadata/       # Analysis metadata

🔧 Configuration

Command Line Options

Option	Short	Description	Default
--full	-f	Run all security checks	False
--timeout	-t	Request timeout in seconds	30
--threads	-j	Number of concurrent threads	10
--verbose	-v	Verbose output	False
--output	-o	HTML report path	None
--version	-V	Show version and exit	False
--help	-h	Show help and exit	False

Available Checks

• dir_enum - Directory enumeration
• infoleak - Information leakage
• ssl - SSL/TLS configuration
• headers - Security headers
• cors - CORS configuration
• fingerprint - Server fingerprinting
• ddos - DDoS protection
• xss - XSS vulnerabilities
• redirect - Open redirects
• csrf - CSRF protection
• libs - JavaScript libraries
• subdomain - Subdomain enumeration

🚨 Security Notice

⚠️ IMPORTANT: Only scan websites you own or have explicit permission to test.

This tool is designed for:

• ✅ Security professionals conducting authorized assessments
• ✅ Developers testing their own applications
• ✅ Security researchers with proper authorization

Do not use this tool for:

• ❌ Unauthorized security testing
• ❌ Attacking websites you don't own
• ❌ Any malicious activities

🛠️ Development

Install from Source

# Clone the repository
git clone https://github.com/smundhra-git/webtest.git
cd webtest

# Install dependencies
pip3 install -r webTest/requirements.txt

# Run directly
python3 webTest/cli.py https://example.com --full-scan

Run Tests

# Test enhanced verification
python3 webTest/tests/test_enhanced_verification.py

# Test file verification
python3 webTest/tests/test_file_verification.py

📈 Performance

• Fast scanning with concurrent requests
• Smart verification - Only GET requests for 200 responses
• Efficient detection - HEAD-first approach reduces bandwidth
• Scalable architecture - Handles large-scale scans

🤝 Contributing

1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Add tests
5. Submit a pull request

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

🆘 Support

• Issues: GitHub Issues
• Documentation: GitHub Wiki

---

WebTest - Enterprise-grade web security scanning made simple! 🚀