Working

Phase-1

• • User has to write:- "python3 web_scan.py (https or http) ://example.com".
• • At first the program will note the initial time of running, then it will make a url with "www.example.com".
• • After this step the system will check the internet connection using ping.
• • Functionalities:-
• -> § To navigate to helper menu write this command:- --help for update --update
• -> § If user want to skip current scan/test:- CTRL+C
• -> § To quit the scanner use:- CTRL+Z
• -> § The program will tell the scanning time taken by the tool for a specific test.

Phase-2

• • From here the main function of scanner will start:
• The scanner will automatically select any tool to start scanning.
• • Scanners that will be used and filename rotation (default: enabled (1))
• • Command that is used to initiate the tool (with parameters and extra params) already given in code
• • After founding vulnerability in web application scanner will classify vulnerability in specific format:-
• -> § [Responses + Severity (c - critical | h - high | m - medium | l - low | i - informational) + Reference for Vulnerability Definition and Remediation]
• -> § Here c or critical defines most vulnerability wheres l or low is for least vulnerable system
• • Vulnerabilities
  After this scanner will show results which includes:
• -> § Response time
• -> § Total time for scanning
• -> § Class of vulnerability
• • Remediation: Now, Scanner will tell about harmful effects of that specific type of vulnerability. Scanners tell about sources to know more about the vulnerabilities. (websites). After this step, the scanner suggests some remedies to overcome the vulnerabilities.

Phase-3

• • Scanner will generate a proper report including:


• -> § Total number of vulnerabilities scanned
• -> § Total number of vulnerabilities skipped
• -> § Total number of vulnerabilities detected
• -> § Time taken for total scan
• -> § Details about each and every vulnerability.


• • Writing all scan files output into SA-Debug-ScanLog for debugging purposes under the same directory


• • For Debugging Purposes, You can view the complete output generated by all the tools named SA-Debug-ScanLog.