Rapidscan

Abstract

1. Introduction

:new: The Multi-Tool Web Vulnerability Scanner.

2. Objective

:new: The Multi-Tool Web Vulnerability Scanner.

This project demonstrates how Python can be applied to a real-world Cybersecurity & Ethical Hacking problem.

3. Key Features / Modules

• one-step installation.
• executes a multitude of security scanning tools, does other custom coded checks and prints the results spontaneously.
• some of the tools include nmap, dnsrecon, wafw00f, uniscan, sslyze, fierce, lbd, theharvester, amass, nikto etc executes under one entity.
• saves a lot of time, indeed a lot time!.
• checks for same vulnerabilities with multiple tools to help you zero-in on false positives effectively.
• extremely light-weight and not process intensive.
• legends to help you understand which tests may take longer time, so you can Ctrl+C to skip if needed.
• association with OWASP Top 10 & CWE 25 on the list of vulnerabilities discovered. (_under development_)
• critical, high, medium, low and informational classification of vulnerabilities.
• vulnerability definitions guides you what the vulnerability actually is and the threat it can pose.

4. Technology Stack

5. System Requirements

General requirements for this technology stack — check the README for exact versions.

• Python 3.8 or later
• pip / virtualenv for dependencies
• VS Code, PyCharm or Jupyter Notebook
• Git (to clone the repository)

6. Installation & Setup

git clone https://github.com/skavngr/rapidscan.git
cd rapidscan

git clone https://github.com/skavngr/rapidscan.git /opt/
cd /opt/rapidscan
python3 -m pip install .

Full setup instructions are in the project README.

7. Future Enhancements

Suggested extensions you can add to make this your own project.

• Add logging and alert notifications (email / Telegram)
• Write a threat model document for the tool
• Package it with Docker for safe lab testing

8. Viva / Review Questions

Common questions examiners ask for projects in this domain.

1. Which threat or attack does this project defend against?
2. What detection or protection technique is used and what are its limits?
3. How are false positives and false negatives handled?
4. Which cryptographic algorithms or security standards are involved?
5. What legal and ethical rules apply when testing a tool like this?

9. Source Code & License

This project is developed by skavngr and published on GitHub under the GNU General Public License v2.0. Please follow the license terms and credit the original author when you use or modify this code.