Skip to content

Exploit Scope v0.5.0-alpha

This site is just a simple documentation page that explains how the Exploit Scope works. Possibly how to donwload the application/launch will also be specified.
Most of the code is written in python.
However the end reporting file as of v.0.5.0-alpha is a JSON.
Both are explained below:

Code Content Tabs

scanner-snippet.py
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
info = fetch_info(u)
#Check Security Headers
sec = check_security_headers(info["headers"])
if not sec["is_secure"]:
    all_findings.append({
        "type": "Missing Security Headers",
        "severity": classify_finding("Missing Security Headers"),
        "url": u,
        "evidence": ", ".join(sec["missing_headers"])
    })
scan_report.json
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
"findings": [
        {
            "type": "Missing Security Headers",
            "severity": "LOW",
            "url": "http://testphp.vulnweb.com/",
            "evidence": "Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options"
        },
        {
            "type": "SQL Injection Detected",
            "severity": "HIGH",
            "url": "http://testphp.vulnweb.com/?id=' OR '1'='1",
            "evidence": "SQL error patterns detected in response"
        }]
Small note

The codes given above are only snippets.
The full code can be taken from the github page on the top right corner