A powerful, AI-enhanced vulnerability scanner built with Project Discovery tools, packaged in Docker for portability and ease of use. This tool integrates advanced AI analysis for smarter vulnerability prioritization, enabling you to efficiently secure your applications and infrastructure.
- Automated Scanning: Scans for vulnerabilities using Nuclei templates.
- Reconnaissance Tools: Includes Subfinder, Httpx, Naabu, and DNSx for comprehensive asset discovery.
- AI-Driven Analysis: Uses machine learning to prioritize vulnerabilities and reduce false positives.
- Comprehensive Reporting: Generates detailed scan reports with actionable insights.
- Ease of Deployment: Fully containerized with Docker for portability.
- API Integration: Optional Flask-based API for remote operation.
- Nuclei: Template-based vulnerability scanning.
- Subfinder: Subdomain enumeration.
- Httpx: HTTP probing for live hosts.
- Naabu: Fast port scanning.
- DNSx: DNS enumeration.
- Docker installed on your machine.
- Python 3.8+ (if running scripts outside Docker).
Clone the repository and build the Docker image:
git clone https://github.com/your-username/ai-vuln-scanner.git
cd ai-vuln-scanner
docker build -t ai-vuln-scanner .
Start the container interactively:
docker run -it ai-vuln-scanner
Inside the container, use the CLI to perform various operations:
bash /opt/scripts/cli.sh scan https://example.com
bash /opt/scripts/cli.sh enumerate example.com
bash /opt/scripts/cli.sh analyze /path/to/results.json
python3 /opt/scripts/api.py
Access the API at http://localhost:5000
.
cli.sh
: Main command-line interface for managing scans.analyze.py
: AI-powered analysis of scan results.update_templates.sh
: Automatically updates Nuclei templates.api.py
: Flask-based API for remote operations.
Modify the nuclei-config/config.yaml
file to customize Nuclei settings. Templates are stored in /opt/nuclei-config/templates
.
Scan results are saved to the results
directory (mapped to /opt/results
inside the container). These results can be analyzed using the built-in AI tools.
- Add support for advanced AI models to improve risk scoring.
- Integrate with CI/CD pipelines.
- Extend API functionality for enterprise use cases.
Contributions are welcome! Please fork the repository and submit a pull request with your changes.
This project is licensed under the MIT License. See the LICENSE
file for details.