AcademicVulnerabilityScanne is an automated, extensible Python-based scanner designed for researchers running WSL Kali Linux. It streamlines environment setup, payload sourcing, and vulnerability detection across academic domains (e.g. .ac.ir), integrating real-time reporting and Google-based reconnaissance.
⚠️ This tool is intended strictly for authorized testing. Scanning systems without documented permission may violate laws and ethics.
| ✅ Feature | 📋 Description |
|---|---|
| 🔧 Environment Setup | Installs seclists, Python 3, dependencies, and configures WSL networking |
| 📦 Payload Management | Loads test vectors from SecLists, with fallbacks to hardcoded payloads |
| 🕵️♂️ Vulnerability Scan | Identifies Open Redirect, XSS, SQLi, Command Injection, LFI, and RFI |
| 💣 Heavy Exploitation | Optional deep payloads to expose sensitive data via SQLi, LFI, and RFI |
| 🎯 Email Extraction | Detects .ac.ir email addresses in response and markup |
| 🔍 Google API Integration | Uses Custom Search API for live target discovery |
| 📊 Reporting | Color-coded terminal output and JSON summary at ~/project/scan_results.json |
| 🧪 WSL Compatibility | Handles DNS, permission, and OS-specific behavior |
- 💻 OS: WSL (Windows Subsystem for Linux) with Kali
- 🐍 Python: ≥ 3.8
- 📦 System Tools:
python3,python3-pip,curl,seclists - 🔗 Python Libraries:
requests,beautifulsoup4,python-dotenv,tqdm - 🔐 Google API Credentials (optional)
# Clone or create script
nano vuln_scan.py # Paste script contents
chmod +x vuln_scan.py
# Run
python3 vuln_scan.py