Generate a comprehensive OWASP Top 10 vulnerability scanning tool with automated detection, severity scoring, and remediation guidance.
You are a senior application security engineer. Build an OWASP Top 10 (2025) vulnerability scanner. ## Configuration - **Target**: [TARGET e.g. https://example.com / source code directory] - **Scan Type**: [SCAN_TYPE e.g. DAST (dynamic) / SAST (static) / both] - **Tech Stack**: [TECH_STACK e.g. Node.js + Express / Django / Spring Boot / .NET] - **Language**: [LANGUAGE e.g. Python / Go / TypeScript] - **Output Format**: [OUTPUT e.g. JSON / HTML report / SARIF] ## Scanner Modules ### A01: Broken Access Control - IDOR detection: parameter tampering on resource IDs - Privilege escalation testing: access admin endpoints with user tokens - CORS misconfiguration detection - Directory traversal attempts - JWT token manipulation (alg:none, key confusion) - Missing function-level access control checks ### A02: Cryptographic Failures - TLS configuration analysis (cipher suites, protocols) - Sensitive data in URLs or logs - Weak hashing algorithm detection (MD5, SHA1 for passwords) - Hardcoded secrets and API keys in source code - Missing encryption for sensitive data at rest ### A03: Injection - SQL injection (error-based, blind, time-based) - NoSQL injection (MongoDB operators) - Command injection (OS command, LDAP) - XSS (reflected, stored, DOM-based) - Template injection (SSTI) - Header injection (CRLF, Host header) ### A04: Insecure Design - Business logic flaw patterns - Rate limiting absence on sensitive endpoints - Missing account lockout mechanism - Unlimited resource allocation ### A05: Security Misconfiguration - Default credentials detection - Unnecessary HTTP methods enabled - Stack trace/debug info leakage - Missing security headers (CSP, HSTS, X-Frame-Options) - Open directory listings - Outdated server versions in headers ### A06: Vulnerable and Outdated Components - Dependency scanning (npm audit, pip-audit, dotnet list package --vulnerable) - CVE database lookup for identified versions - License compliance check - End-of-life component detection ### A07: Authentication Failures - Brute force resistance testing - Password policy validation - Session management (fixation, timeout, invalidation) - MFA bypass attempts - Password reset flow vulnerabilities ### A08: Software and Data Integrity Failures - Deserialization vulnerability detection - CI/CD pipeline security checks - Unsigned update mechanism detection - SRI (Subresource Integrity) verification ### A09: Security Logging and Monitoring Failures - Check for logging of security events - Log injection vulnerability testing - Verify alerting mechanisms ### A10: Server-Side Request Forgery (SSRF) - Internal network access attempts - Cloud metadata endpoint access (169.254.169.254) - DNS rebinding detection - Protocol smuggling tests ## Output - Findings with CVSS v4.0 scores - Remediation guidance with code examples for [TECH_STACK] - Executive summary with risk rating - Compliance mapping (PCI-DSS, GDPR, SOC2) - Export to [OUTPUT] format Generate the complete scanner with modular architecture, allowing individual modules to run independently.
Free to copy and use. Compatible with Claude 4 Opus, GPT-5, Gemini 2.5 Pro, Llama 4 Maverick.
Configure target URL and tech stack. Run in DAST mode against staging environments only. For SAST, point to source code directory. Review findings and prioritize by CVSS score.
Initial release
Sign in and download this prompt to leave a review.