How allu555/enterprise-security-scanner works
Enterprise Security Scanner Pro is a Streamlit web-application security scanner. Users authenticate, submit a target for scanning, review findings, and access saved scan history and reports; administrators manage users and system settings. The README documents crawling, web vulnerability checks, reconnaissance, AI assistance, dashboards, and exports. Several capabilities are described in the README but their implementation and wiring are not fully visible in the sampled source, so those links are limited to documented relationships.
Main entry points: security_scanner_integrated.py Scan runtime · database.py Database operations · admin.py Admin dashboard · auth.py Authentication and authorization
Components 18
Scanner workflow
- Streamlit application
security_scanner_integrated.py - Scan runtime
security_scanner_integrated.py
Security analysis
- Web crawler
security_scanner_integrated.py - Web vulnerability checks
security_scanner_integrated.py - Headers and TLS
security_scanner_integrated.py - Network reconnaissance
security_scanner_integrated.py - Nuclei integration
security_scanner_integrated.py - AI assistant
security_scanner_integrated.py
Identity and administration
- Authentication and authorization
auth.py - Admin dashboard
admin.py - Database operations
database.py - SQLite database
Results and insights
- Scan history
database.py - Dashboards and exports
security_scanner_integrated.py
Other components
- Scanner user
- Administrator
- Target web application
- Ollama service
Connections 24
- Scanner user → Streamlit application: uses
- Administrator → Admin dashboard: manages
- Streamlit application → Authentication and authorization: checks access
- Streamlit application → Scan runtime: starts scans
- Scan runtime → Web crawler: discovers URLs
- Scan runtime → Web vulnerability checks: tests vulnerabilities
- Scan runtime → Headers and TLS: checks configuration
- Scan runtime → Network reconnaissance: enumerates network
- Scan runtime → Nuclei integration: runs templates
- Web crawler → Target web application: requests pages
- Web vulnerability checks → Target web application: sends test requests
- Headers and TLS → Target web application: inspects responses
- Network reconnaissance → Target web application: probes services
- Nuclei integration → Target web application: scans target
- AI assistant → Ollama service: requests analysis
- Admin dashboard → Authentication and authorization: checks role
- Authentication and authorization → Database operations: reads and updates users
- Admin dashboard → Database operations: manages records
- Streamlit application → Database operations: initializes database
- Database operations → SQLite database: reads and writes
- Scan runtime → Scan history: records scans
- Scan history → Database operations: uses storage
- Dashboards and exports → Scan history: loads scan records
- Scan runtime → Dashboards and exports: presents results