🔐 Security Kit — Pentest Helper Demo

• Request fuzzer — sends common payload patterns to discover unexpected behavior
• SQL injection tester — error-based and blind injection pattern detection
• XSS scanner — reflected XSS detection with encoding bypass checks
• Multiple test modes — run `fuzz`, `sqli`, `xss`, or `all` in one pass
• Configurable endpoints — test multiple URLs and HTTP methods from a config file
• Rate limiting — built-in delays to avoid overwhelming targets

# Fuzz an endpoint
python src/pentest_helper.py --target https://app.example.com --mode fuzz

# Test for SQL injection
python src/pentest_helper.py --target https://example.com --mode sqli

# Test for XSS
python src/pentest_helper.py --target https://example.com --mode xss

# Run all tests with JSON output
python src/pentest_helper.py --target https://example.com --mode all --output report.json

{
    "target": "https://app.example.com",
    "modes": ["sqli", "xss", "fuzz"],
    "endpoints": [
        {"url": "https://app.example.com/search?q=test", "method": "GET"},
        {"url": "https://app.example.com/login", "method": "POST"}
    ],
    "rate_limit_ms": 500,
    "timeout_seconds": 10
}