Web Vulnerability Scanner: Technical Report

The background to this project is set out to overcome the lack of online security tools available for small to medium sized web development companies. Currently, there are few applications online that would be affordable by small and medium sized web development/design companies. There are companies out there that will perform security scans of a company’s website, but they are quite expensive, and are only geared towards larger enterprises, so smaller companies may not be able to afford their service. By developing this tool, companies will be able to use an online service where they can perform a web vulnerability scan on a web server. This will help with costs, and help companies keep on top any security issues. The aim of this project is to develop an application, where a user can supply their public IP address or domain name, then using the system they can initiate or schedule scans on their website. The system will run a scan using easily available, and custom tools to perform scans like port scans, header inspection, XML sitemap, SQL injection vulnerabilities, and Nikto, which will build a list of all possible know vulnerabilities that may exist on the customer’s web server. Using this information, customer will be able to implement patches and fixes to address the issues found during the scan