ScanShield

ScanShield is an advanced vulnerability scanner built to identify common web security flaws such as SQL Injection, XSS, LFI, RFI, directory listing issues, and security header misconfigurations.

Features

• SQL Injection: Detects SQL injection vulnerabilities with a variety of payloads.
• Cross-Site Scripting (XSS): Scans for XSS vulnerabilities using multiple payloads.
• Local File Inclusion (LFI): Tests for LFI vulnerabilities with payloads for system files.
• Remote File Inclusion (RFI): Identifies potential RFI vulnerabilities with external payloads.
• Directory Listing: Checks for directory listing vulnerabilities across common directories.
• Security Headers: Ensures HTTP security headers like X-Frame-Options, Strict-Transport-Security, and more are configured properly.

Installation

Linux

1. Clone this repository:

   git clone https://github.com/Fear2o/ScanShield.git
   cd ScanShield

2. Install required Python packages:

   pip install -r requirements.txt

3. Run the scanner:

   python scanshield.py

Windows

1. Clone this repository:

   • Use Git for Windows to clone the repo or download the ZIP file and extract it.

2. Install Python and required packages:

   • Make sure Python is installed from python.org.
   • Open Command Prompt (cmd) and navigate to the ScanShield directory:

     cd C:\path\to\ScanShield

3. Install required Python packages:

   pip install -r requirements.txt

4. Run the scanner:

   python scanshield.py

Termux (Android)

1. Install Termux from the Google Play Store or F-Droid.

2. Update packages:

   pkg update

3. Install Git and Python:

   pkg install git python

4. Clone the repository:

   git clone https://github.com/Fear2o/ScanShield.git
   cd ScanShield

5. Install required Python packages:

   pip install -r requirements.txt

6. Run the scanner:

   python scanshield.py

macOS

1. Clone this repository:

   git clone https://github.com/Fear2o/ScanShield.git
   cd ScanShield

2. Install required Python packages:

   pip install -r requirements.txt

3. Run the scanner:

   python scanshield.py

Payloads

ScanShield uses a variety of payloads for SQL injection, XSS, LFI, and RFI testing. It will automatically detect and attempt to exploit these vulnerabilities.

Contributing

Feel free to fork this repo and submit pull requests for new features or improvements. Contributions are welcome!

License

This project is licensed under the MIT License - see the LICENSE file for details.