Multi-Tool-Web-Vulnerability-Scanner - 🚀 ZencefilScan: Advanced Network Reconnaissance &

项目说明

<p align="center">
<img src=" alt="Python 3.6+">
<img src=" alt="Platform">
<a href=" src=" alt="Issues"></a>
<a href=" src=" alt="Forks"></a>
<a href=" src=" alt="Stars"></a>
<a href=" src=" alt="License"></a>
</p>

<h1 align="center">🟥 ZencefilScan v1.2</h1>
<h3 align="center">The Multi-Tool Web Scanner with 3D Holo-Dashboard</h3>

<p align="center">
<b>One command. 80+ checks. Zero false-positi.</b><br/>
Orchestrates industry-standard security tools, correlates findings, and results through a futuristic 3D command center.
</p>

---

🎯 What is ZencefilScan?

ZencefilScan is a Python 3 automated web scanner designed for penetration testers and security researchers. Instead of running dozens of scanning tools one by one, ZencefilScan orchestrates them all under a single command — executing, correlating, and reporting results with se classification, definitions, and remediation guidance.

Key Highlights

| Feature | Description |
|---------|-------------|
| 🔍 80+ Checks | SSL, XSS, SQLi, LFI/RFI/RCE, DNS, CMS detection, port scanning, and more |
| 🛡️ WAF E Engine | Spoofed headers, random user-agents, and stealth scan modes |
| 🤖 AI Exploit Chaining | Dynamically combines discovered for complex attack paths |
| 💀 Auto-Pwn C2 Engine | Automatically generates Metasploit exploit commands for critical findings |
| 🌐 Headless DOM-XSS Hunter | Browser-based DOM XSS detection |
| 🕵️ OSINT & Dark Web Checker | Polls public APIs for data breaches and threat intelligence |
| 📊 3D Holo-Dashboard | Real-time Three.js-powered cyberpunk command center UI |
| 📝 Auto-Reports | reports with OWASP/CWE mappings and remediation steps |

---

🚀 Quick Start

---

📦 Installation

Option 1: pip Install (Recommended)

This creates a zencefilscan command in your PATH.

Option 2: Docker (Kali-based, all tools included)

Option 3: Direct Execution

System Requirements

| Requirement | Details |
|---|---|
| Python | 3.6+ |
| Preferred OS | Kali Linux (ships with most tools pre-installed) |
| Tested On | Kali, Parrot OS, Ubuntu, macOS |
| Dashboard | Node.js 18+ (for React de) or use the standalone dashboard/dist/index.html |

---

🛠️ CLI Usage & Flags

| Flag | Shorthand | Description |
|------|-----------|-------------|
| --help | -h | Display help context |
| --update | -u | Update ZencefilScan to the latest |
| --evade | -e | Enable WAF E Engine (spoofed headers, random user-agents, stealth Nmap scans) |
| --autopwn | -a | Enable Auto-Pwn C2 Engine (auto-generate Metasploit exploit commands) |
| --aichain | -c | Enable AI Exploit Chaining (combine for complex attack paths) |
| --dom | -d | Enable Headless Browser DOM-XSS Hunter (requires Selenium + Chrome) |
| --osint | -o | Enable OSINT & Dark Web Leak Checker (polls public breach APIs) |
| --dashboard | | Launch the 3D Holo-Dashboard after scan completion |
| --skip TOOL | -s TOOL | Skip a specific tool (can be used multiple times) |
| --nospinner | -n | Disable the idle loader/spinner animation |

Examples

Interacti

| Key | Action |
|-----|--------|
| Ctrl+C | Skip current test |
| Ctrl+Z | Quit ZencefilScan |

---

🔬 Checks (80+)

Network & Infrastructure

Web Application

SSL/TLS

OSINT & Intelligence

---

📊 3D Holo-Dashboard

ZencefilScan includes a futuristic 3D command center dashboard built with Three.js for real-time scan .

Features

Running the Dashboard

Option 1: Standalone HTML (No build tools required)

Option 2: React De (Requires Node.js 18+)

The dashboard reads from dashboard/public/zencefil_report.json, which is automatically generated when you run ZencefilScan with the --dashboard flag.

---

🏗️ Project Structure

---

📋 Se Classifications

| Level | Label | Description |
|-------|-------|-------------|
| 🔴 | Critical | Requires immediate attention — may lead to full compromise or service una |
| 🟠 | High | May not lead to immediate compromise, but considerable probability exists |
| 🟡 | Medium | Attacker may correlate multiple findings to launch sophisticated attacks |
| 🔵 | Low | Not a serious issue, but recommended to address |
| 🟢 | Info | Not a — informational alert for consideration |

---

🔧 Integrated Security Tools

ZencefilScan orchestrates the following tools (auto-detects a):

| Tool | Purpose |
|------|---------|
| nmap | Port scanning, service detection, NSE scripts |
| nikto | Web ser scanner |
| dirb | Directory brute forcing |
| wafw00f | WAF detection |
| sslyze | SSL/TLS configuration analysis |
| dnsrecon | DNS enumeration & zone transfers |
| dnswalk | DNS zone transfer checking |
| dnsenum | DNS enumeration |
| dnsmap | Subdomain brute forcing |
| fierce | DNS reconnaissance |
| amass | Subdomain enumeration (OWASP) |
| theHar | Email & subdomain har |
| dmitry | Deep information gathering |
| whois | Domain registration information |
| whatweb | Web technology fingerprinting |
| wapiti | Web application scanner |
| uniscan | LFI/RFI/RCE/XSS/SQLi scanner |
| xsser | Cross-site scripting detection |
| davtest | WebDA testing |
| lbd | Load balancer detection |
| golismero | Multi-purpose security framework |
| wget | HTTP request utility |
| host | DNS lookup utility |

> Note: ZencefilScan gracefully handles missing tools — it will skip una scanners and continue with the rest.

---

📄 Report Generation

After each scan, ZencefilScan generates:

1. Report (rs.vul.<target>.<date>) — Detailed findings with descriptions and remediation
2. Debug Log (rs.dbg.<target>.<date>) — Complete raw output from all tools
3. Dashboard JSON (dashboard/public/zencefil_report.json) — Machine-readable results for the 3D dashboard (when --dashboard flag is used)

---

⚠️ Disclaimer

ZencefilScan is intended for authorized security testing only. Always obtain proper authorization before scanning any target. Unauthorized scanning of systems you do not own or ha to test is illegal and unethical.

The de assume no liability for misuse of this tool.

---

🤝 Contributing

1. Fork the repository
2. Create your feature branch: git checkout -b my-new-feature
3. Commit your changes: git commit -am 'Add some feature'
4. Push to the branch: git push origin my-new-feature
5. Submit a pull request

---

📜 License

This project is licensed under the GNU General Public License v3.0 — see the LICENSE file for details.

---

<p align="center">
<b>Created by <a href=" Efendi</a></b><br/>
<i>One scan to find them all.</i>
</p>

项目信息

开发语言：Python

Star 数：8

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕🚀 ZencefilScan: Advanced Network Reconnaissance & Penetration Testing Scanner with Async Engine and Pattern Matching.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。