A comprehensive web security scanning tool with a modern GUI interface, developed by Revant and Mansour.
- Port Scanning: Comprehensive port enumeration with service detection
- Directory Enumeration: Web directory and file discovery using Gobuster
- Form Analysis: Automatic form input extraction and analysis
- SQL Injection Testing: Automated SQL injection vulnerability assessment
- Full Vulnerability Assessment: Complete security audit workflow
- Professional Design: Dark theme with blue accents.
- Multi-Panel Layout: Configuration panel and results display
- Dynamic Tabs: Different result views based on scan type
- Real-time Updates: Live progress and status updates within terminal
- Asset Integration: Custom logos and button images
Professional dark-themed interface with scan configuration panel and results display
Detailed port analysis showing open ports, services, and security assessments
Comprehensive scan results with risk assessment and vulnerability findings
- Responsive Design: Adapts to different screen sizes and resolutions
- Professional UI: Dark theme with blue accents for optimal visibility
- Real-time Updates: Live progress tracking during scans
- Comprehensive Results: Detailed analysis with risk assessments
SecWiz/
βββ gui/ # GUI package
β βββ __init__.py # Package initialization
β βββ gui.py # Main GUI interface
β βββ backend_integration.py # Backend integration layer
β βββ README.md # GUI documentation
βββ tools/ # Backend scanner tools
β βββ portScanner.py # Port scanning logic
β βββ gobuster_scan.py # Directory enumeration
β βββ sqlScanner.py # SQL injection testing
β βββ parmScanner.py # Form input extraction
β βββ utils.py # Utility functions
βββ config/ # Configuration files
βββ assets/ # GUI assets (logos, buttons)
βββ screenshots/ # Application screenshots
βββ resources/ # Scan resources and wordlists
βββ ExternalTools/ # External security tools (sqlmap)
βββ main.py # Application entry point
βββ requirements.txt # Project dependencies
βββ test_integration.py # Integration test suite
βββ LICENSE # MIT License
βββ .gitignore # Git ignore rules
# Clone and setup
git clone <repository-url>
cd SecWiz
python3 -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
pip install -r requirements.txt
# Run the application
python main.py- Python 3.8+
- Virtual environment (recommended)
- External tools:
gobuster,sqlmap
# Clone the repository
git clone <repository-url>
cd SecWiz
# Create and activate virtual environment
python3 -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
# Install dependencies
pip install -r requirements.txt
# Install external tools (if not already installed)
# gobuster: https://github.com/OJ/gobuster
# sqlmap: https://github.com/sqlmapproject/sqlmap# Activate virtual environment
source venv/bin/activate
# Start the application
python main.py# Run the test suite
python test_integration.pyComplete vulnerability assessment including:
- Port scanning and service detection
- Directory enumeration
- Form input analysis
- SQL injection testing
Focused port analysis:
- All ports (open and closed)
- Open ports with running services
- Service identification
Web enumeration:
- All discovered files and directories
- Accessible files (status 200/301)
- Protected files requiring authentication
- Dark Theme: Easy on the eyes for extended use
- Blue Accents: Professional color scheme
- Multi-Panel Layout: Efficient workspace organization
- Dynamic Tabs: Context-aware result display
- Real-time Progress: Live status updates during scans
- Non-blocking Operations: GUI remains responsive during scans
- Error Handling: Comprehensive error reporting
- Result Export: Save scan results to files
The application uses a clean separation of concerns:
- GUI Layer (
gui/gui.py): User interface and interaction - Integration Layer (
gui/backend_integration.py): Bridge between GUI and tools - Tool Layer (
tools/): Individual scanner tools - Configuration (
config/): Settings and wordlists
The project includes comprehensive testing:
- Integration Tests: Verify GUI-backend connectivity
- Import Tests: Ensure all modules load correctly
- GUI Tests: Validate interface creation and functionality
- Ethical Use: Only scan systems you own or have permission to test
- Legal Compliance: Ensure compliance with local laws and regulations
- Responsible Disclosure: Report vulnerabilities through proper channels
- Fork the repository
- Create a feature branch
- Make your changes
- Add tests for new functionality
- Submit a pull request
This project is developed by Revant and Mansour for educational and ethical security testing purposes.
For issues and questions:
- Check the documentation in
gui/README.md - Run the test suite:
python test_integration.py - Verify external tools are properly installed
- Enhanced error handling and reporting
- Progress bars and visual indicators
- PDF and HTML report generation
- Configuration management system
- Plugin architecture for extensibility
- Additional vulnerability scanners


