🔐 Security Kit — Vulnerability Scanner Demo

• TCP port scanning — configurable port ranges with timeout control
• SSL/TLS validation — certificate expiry, chain verification, hostname matching
• HTTP security headers — audits HSTS, X-Frame-Options, CSP, X-Content-Type-Options, and more
• CVE pattern detection — flags common server misconfigurations and known vulnerability signatures
• Multiple output formats — JSON for automation, console for quick checks
• Full scan mode — runs all checks in a single pass with `--full`

# Quick scan with default ports
python src/vulnerability_scanner.py --target api.example.com

# Scan specific ports
python src/vulnerability_scanner.py --target 192.168.1.1 --ports 80,443,8080

# Full scan with JSON output
python src/vulnerability_scanner.py --target example.com --full --output report.json

{
    "target": "api.example.com",
    "ports": [22, 80, 443, 8080, 8443],
    "full_scan": true,
    "timeout_seconds": 5,
    "output_format": "json"
}