Features

This chapter covers the core features and capabilities of Vulnerability Scanner.

Features

• TCP port scanning — configurable port ranges with timeout control
• SSL/TLS validation — certificate expiry, chain verification, hostname matching
• HTTP security headers — audits HSTS, X-Frame-Options, CSP, X-Content-Type-Options, and more
• CVE pattern detection — flags common server misconfigurations and known vulnerability signatures
• Multiple output formats — JSON for automation, console for quick checks
• Full scan mode — runs all checks in a single pass with --full
• Configurable via JSON — save scan profiles for repeatable audits
• Self-contained — zero pip installs, Python 3.10+ stdlib only
• Non-destructive — read-only scanning, safe for production hosts

Requirements

• Python 3.10+
• No external dependencies (stdlib only)

Quick Start

Follow this guide to get Vulnerability Scanner up and running in your environment.

Quick Start

# Quick scan with default ports
python src/vulnerability_scanner.py --target api.example.com

# Scan specific ports
python src/vulnerability_scanner.py --target 192.168.1.1 --ports 80,443,8080

# Full scan with JSON output
python src/vulnerability_scanner.py --target example.com --full --output report.json

Output

Console output shows a severity-tagged list of findings. JSON output includes structured data for each finding with severity level, description, and remediation advice.