What question did this study set out to answer?

To develop and evaluate a Python-based tool for dynamic application security testing of web applications.

February 5, 2026Open Access

Pentraguard - Web Vulnerability Scanner And Security Analyzer

MRMrs. S. Revathi SSSabarinathan S2 SASai Vigneshwaran A

Key Points

To develop and evaluate a Python-based tool for dynamic application security testing of web applications.
Python-based web vulnerability scanner
Utilizes two core modes: Discovery Mode and Active Scan Mode
Identifies common vulnerabilities aligned with OWASP Top 10
Includes domain ownership verification for ethical usage
Detects vulnerabilities like SQL Injection and Cross-Site Scripting
Produces detailed vulnerability reports with analysis and recommendations
Ensures ethical scanning by verifying domain ownership

Abstract

PentraGuard is a Python-based ethical web vulnerability scanner designed as a Dynamic Appli-cation Security Testing (DAST) tool to evaluate the security posture of real-time web applica-tions. It automates systematic testing to uncover common vulnerabilities such as SQL Injection (SQLi), Cross-Site Scripting (XSS), insecure HTTP headers, and sensitive data exposure, align-ing with the OWASP Top 10 security risks. The system functions in two core modes: Discov-ery Mode and Active Scan Mode. In Discovery Mode, the scanner safely analyzes and maps the application structure by identifying web pages, links, and input forms without using harmful payloads. Active Scan Mode performs controlled security assessments using predefined attack patterns to detect vulnerabilities. To enforce ethical usage, PentraGuard includes a domain own-ership verification feature that restricts scanning to authorized or owned sites. The tool produces comprehensive vulnerability reports containing technical evidence, impact analysis, and remedia-tion recommendations, enabling users to effectively mitigate identified risks.

Ask AI

Helpful

Bookmark

View Full Paper