Rate my vulnerability scanner

[flugz]

Hey i've been on making my own enterprise level vulnerability scanner. Wanted reviews from you guys. I have uploaded a demo video:

 

[Cryptoinstalls]

Looks nice, question for you, are you preparing this for sale or are you just coding for yourself?

 

[Guest]

Looks nice.

 

[flugz]

Looks nice, question for you, are you preparing this for sale or are you just cnotoding for yourself?

not decided yet

 

[Super Crypt]

not decided yet

what you use for backend? it's flask or js?

 

[flugz]

what you use for backend? it's flask or js?

golang

 

[Super Crypt]

golang

whats for frontend?

 

[flugz]

whats for frontend?

react

 

[prox]

why watch? need to be tested immediately in real conditions.

 

[flugz]

why watch? need to be tested immediately in real conditions.

doing test scans from people atm.

 

[Dread Pirate Roberts]

too few settings, user should be able to select which vulnerabilities to check for, enable/disable directory scans, etc.
also don't forget to add proxy support

 

[flugz]

too few settings, user should be able to select which vulnerabilities to check for, enable/disable directory scans, etc.
also don't forget to add proxy support

sure, will add in.

 

[diams]

look smooth bro ! gl for the release we want try it !!!

 

[flugz]

look smooth bro ! gl for the release we want try it !!!

ty bro.

 

[flugz]

launching soon

 

[flugz]

Hey i've been on making my own enterprise level vulnerability scanner. Wanted reviews from you guys. I have uploaded a demo video:

please drop site names to scan and i will share results

 

[A13eks]

Вы отлично справились, у меня вопрос, используете ли вы правила yaml для обнаружения наличия уязвимостей? Поскольку я видел, что он сканировал sqlinject, вы можете попробовать правило nuclei, чтобы сохранить последнюю версию опыта и еще больше улучшить свои возможности сканирования уязвимостей.

 

[Toxic404]

nice my brother

 

[flugz]

You did a great job, my question is, do you use yaml rules to detect the presence of vulnerabilities? Since I saw that it scanned sqlinject, you can try the nuclei rule to keep the latest experience and further improve your vulnerability scanning capabilities.

so we do use nuclei for basic vulnerbility scanning, but for more complicated vulnerabilities (like owasp top 10) we use custom code.

 

[flugz]

bumppp bump