# RapidScan | The Multi-Tool Web Vulnerability Scanner **URL:** \ **Category:** Tools & Scripts\ **Tags:** tools, programming, hacking, technology, documents\ **Created:** [May 31, 2020, 12:34pm UTC](https://onehack.st/t/rapidscan-the-multi-tool-web-vulnerability-scanner/89236 "2020-05-31T12:34:18Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![NoBody](https://onehack.st/user_avatar/onehack.st/nobody/32/163880_2.png) [@NoBody](https://onehack.st/u/NoBody)\ **Post date:** [May 31, 2020, 12:34pm UTC](https://onehack.st/t/rapidscan-the-multi-tool-web-vulnerability-scanner/89236/1 "2020-05-31T12:34:18Z")
![image](https://onehack.st/uploads/default/original/3X/0/9/099ae5e5c34b547edff7cce116d59d96f993a187.png) [![GitHub issues](https://camo.githubusercontent.com/2ab28ba80af2e79c49e9711a79443490ab883f2d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6973737565732f736b61766e67722f72617069647363616e2e737667)](https://github.com/skavngr/rapidscan/issues) [![GitHub forks](https://camo.githubusercontent.com/4dd7cbce44e17b5836515a2a2764c10246014544/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f666f726b732f736b61766e67722f72617069647363616e2e737667)](https://github.com/skavngr/rapidscan/network) [![GitHub stars](https://camo.githubusercontent.com/615210b0ab9c8c5097a0767a0e9caedfe07274e3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f736b61766e67722f72617069647363616e2e737667)](https://github.com/skavngr/rapidscan/stargazers) [![GitHub license](https://camo.githubusercontent.com/c8d4226dae2db6f1c31aed5e404e25af701f3769/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6963656e73652f736b61766e67722f72617069647363616e2e737667)](https://github.com/skavngr/rapidscan/blob/master/LICENSE) # 🎅 RapidScan - _The Multi-Tool Web Vulnerability Scanner_ ## Evolution: > It is quite a fuss for a pentester to perform _ **binge-tool-scanning** _ ( _running security scanning tools one after the other_ ) sans automation. Unless you are a pro at automating stuff, it is a herculean task to perform binge-scan for each and every engagement. The ultimate goal of this program is to solve this problem through automation; viz. **running multiple scanning tools to discover vulnerabilities, effectively judge false-positives, collectively correlate results** and **saves precious time** ; all these under one roof. > > Enter **RapidScan**. ## Features - **one-step installation**. - **executes a multitude of security scanning tools** , does other **custom coded checks** and **prints the results spontaneously**. - some of the tools include `nmap, dnsrecon, wafw00f, uniscan, sslyze, fierce, lbd, theharvester, dnswalk, golismero` etc executes under one entity. - saves a lot of time, **indeed a lot time!**. - **checks for same vulnerabilities with multiple tools** to help you **zero-in on false positives** effectively. - **legends** to help you understand which tests may take longer time, so you can `Ctrl+C` to skip if needed. - **association with OWASP Top 10 2017** on the list of vulnerabilities discovered. ( _under development_ ) - **critical, high, medium, low and informational** classification of vulnerabilities. - **vulnerability definitions** guides you what the vulnerability actually is and the threat it can pose. ( _ ~~**under development**~~ _ ) - **remediations** tells you how to plug/fix the found vulnerability. ( _ ~~**under development**~~ _ ) - **executive summary** gives you an overall context of the scan performed with critical, high, low and informational issues discovered. ( _under development_ ) - **artificial intelligence** to deploy tools automatically depending upon the issues found. for eg; automates the launch of `wpscan` and `plecost` tools when a wordpress installation is found. ( _under development_ ) - **detailed comprehensive report** in a portable document format (\*.pdf) with complete details of the scans and tools used. ( _under development_ ) ### FYI: - _program is still under development, **works** and currently supports **80** vulnerability tests._ - _parallel processing is not yet implemented, may be coded as more tests gets introduced._ ## Vulnerability Checks - ✔ DNS/HTTP Load Balancers & Web Application Firewalls. - ✔ Checks for Joomla, WordPress and Drupal - ✔ SSL related Vulnerabilities ( _HEARTBLEED, FREAK, POODLE, CCS Injection, LOGJAM, OCSP Stapling_ ). - ✔ Commonly Opened Ports. - ✔ DNS Zone Transfers using multiple tools ( _Fierce, DNSWalk, DNSRecon, DNSEnum_ ). - ✔ Sub-Domains Brute Forcing. - ✔ Open Directory/File Brute Forcing. - ✔ Shallow XSS, SQLi and BSQLi Banners. - ✔ Slow-Loris DoS Attack, LFI ( _Local File Inclusion_ ), RFI ( _Remote File Inclusion_ ) & RCE ( _Remote Code Execution_ ). - & more coming up… ## Requirements - Python 2.7 - Kali OS ( _ **Preferred** , as it is shipped with almost all the tools_ ) For other OS flavours, working on a docker support. Hang on. ## Usage **Download the script and give executable permissions** - `wget -O rapidscan.py https://raw.githubusercontent.com/skavngr/rapidscan/master/rapidscan.py && chmod +x rapidscan.py` ### With docker To run a scan for `example.com` the command below has to be run. After completion reports can be found in the current path under `reports` . ```auto docker run -t --rm -v $(pwd)/reports:/reports kanolato/rapidscan example.com ``` > It is also possible to see rapidscan options running: docker run -t --rm kanolato/rapidscan ## Help ![image](https://onehack.st/uploads/default/original/3X/0/9/099ae5e5c34b547edff7cce116d59d96f993a187.png) ## Output ![image](https://onehack.st/uploads/default/original/3X/b/1/b1f494a8dfb96307a3c15cc9915a48e7ae94cbc1.png) ![image](https://onehack.st/uploads/default/original/3X/a/6/a6a652dfdbf8c7ba7be034477d36cdca59f11b4a.png) ## Contribution - [https://gist.github.com/MarcDiethelm/7303312](https://gist.github.com/MarcDiethelm/7303312) ## GitHub: > **[GitHub - skavngr/rapidscan: :new: The Multi-Tool Web Vulnerability Scanner.](https://github.com/skavngr/rapidscan)** > > :new: The Multi-Tool Web Vulnerability Scanner.