script.py

#!/usr/bin/env python3

import requests
from bs4 import BeautifulSoup
from urllib.parse import urljoin
import argparse
import time
import sys

# ANSI escape sequences for styling
RESET = "\033[0m"
BOLD = "\033[1m"
CYAN = "\033[96m"
GREEN = "\033[92m"
YELLOW = "\033[93m"
RED = "\033[91m"

def is_vulnerable_to_sql_injection(url):
    payload = "' OR '1'='1"
    response = make_request(url, params={'id': payload})
    return payload in response.text if response else False

def is_vulnerable_to_xss(url):
    payload = "<script>alert('XSS')</script>"
    response = make_request(url, params={'q': payload})
    return payload in response.text if response else False

def check_security_headers(url):
    response = make_request(url)
    headers = response.headers if response else {}
    missing_headers = []

    if 'X-Frame-Options' not in headers:
        missing_headers.append('X-Frame-Options')

    if 'X-XSS-Protection' not in headers:
        missing_headers.append('X-XSS-Protection')

    if 'X-Content-Type-Options' not in headers:
        missing_headers.append('X-Content-Type-Options')

    if 'Strict-Transport-Security' not in headers:
        missing_headers.append('Strict-Transport-Security')

    return missing_headers

def is_vulnerable_to_open_redirect(url):
    payload = "http://evil.com"
    response = make_request(url, params={'next': payload})
    return payload in response.url if response else False

def check_sensitive_files(url):
    sensitive_paths = [
        'robots.txt', '.git/', '.env', 'config.php', 'admin/', 'backup/', 'wp-config.php'
    ]
    exposed_files = []

    for path in sensitive_paths:
        full_url = urljoin(url, path)
        response = make_request(full_url)
        if response and response.status_code == 200:
            exposed_files.append(full_url)

    return exposed_files

def find_csrf_tokens(url):
    response = make_request(url)
    soup = BeautifulSoup(response.text, 'html.parser') if response else None
    tokens = []

    if soup:
        for form in soup.find_all('form'):
            inputs = form.find_all('input')
            for input_tag in inputs:
                if input_tag.get('type') == 'hidden' and 'token' in input_tag.get('name', '').lower():
                    tokens.append(input_tag['value'])

    return tokens

def make_request(url, params=None):
    try:
        response = requests.get(url, params=params, timeout=10)
        response.raise_for_status()
        return response
    except requests.exceptions.HTTPError as http_err:
        print(f"HTTP error occurred: {http_err}")
    except Exception as err:
        print(f"An error occurred: {err}")
    return None

def parse_args():
    parser = argparse.ArgumentParser(description="WebGuard - Web Vulnerability Scanner")
    parser.add_argument('url', help='The URL to scan for vulnerabilities')
    return parser.parse_args()

def main():
    # Display the styled ASCII art title with delay
    title_lines = [
        "██     ██ ███████ ██████   ██████  ██    ██  █████  ██████  ██████  ",
        "██     ██ ██      ██   ██ ██       ██    ██ ██   ██ ██   ██ ██   ██ ",
        "██  █  ██ █████   ██████  ██   ███ ██    ██ ███████ ██████  ██   ██ ",
        "██ ███ ██ ██      ██   ██ ██    ██ ██    ██ ██   ██ ██   ██ ██   ██ ",
        " ███ ███  ███████ ██████   ██████   ██████  ██   ██ ██   ██ ██████  ",
        "                                                                    ",
        "                     By Guman Rajpurohit                            ",
        "                                                                    ",
        "                         Follow For More                            ",
        "                      https://bit.ly/4c1viyE                        ",
        "                                                                    ",
        "                                                                    "
    ]

    print(f"{CYAN}{BOLD}")
    for line in title_lines:
        print(line)
        time.sleep(0.1)  # Pause for 0.1 seconds between each line
    print(RESET)

    try:
        args = parse_args()
    except SystemExit:
        print("\nUsage: webguard.py <url>")
        sys.exit(1)

    url = args.url if args.url.startswith('http') else 'http://' + args.url

    print(f"\nScanning {url} for vulnerabilities...\n")

    if is_vulnerable_to_sql_injection(url):
        print(f"{RED}[!] SQL Injection vulnerability detected.{RESET}")
    else:
        print(f"{GREEN}[-] No SQL Injection vulnerability found.{RESET}")

    if is_vulnerable_to_xss(url):
        print(f"{RED}[!] XSS vulnerability detected.{RESET}")
    else:
        print(f"{GREEN}[-] No XSS vulnerability found.{RESET}")

    missing_headers = check_security_headers(url)
    if missing_headers:
        print(f"{YELLOW}[!] Missing security headers: {', '.join(missing_headers)}{RESET}")
    else:
        print(f"{GREEN}[-] All essential security headers are present.{RESET}")

    if is_vulnerable_to_open_redirect(url):
        print(f"{RED}[!] Open redirect vulnerability detected.{RESET}")
    else:
        print(f"{GREEN}[-] No open redirect vulnerability found.{RESET}")

    exposed_files = check_sensitive_files(url)
    if exposed_files:
        print(f"{YELLOW}[!] Exposed sensitive files: {', '.join(exposed_files)}{RESET}")
    else:
        print(f"{GREEN}[-] No sensitive files exposed.{RESET}")

    csrf_tokens = find_csrf_tokens(url)
    if csrf_tokens:
        print(f"{YELLOW}[!] CSRF tokens found: {', '.join(csrf_tokens)}{RESET}")
    else:
        print(f"{GREEN}[-] No CSRF tokens found in forms.{RESET}")

if __name__ == "__main__":
    main()