How gauravbatule/vulnerabilities-synthrex works
Synthrex is a web-based website security scanner. A user submits a target through the browser; the server performs target and authorization checks, then exposes scanner operations that the client orchestrates, presenting findings and an AI assessment. The README documents broad scanner coverage, subdomain scans, and PDF reports; only selected scanner and server/client excerpts were sampled, so links for undocumented internal orchestration are omitted where uncertain.
Main entry points: server.js Scanner dispatch · app.js Scan interface · groqAnalyzer.js AI security analysis · index.html Browser UI assets
Components 20
Web experience
- Scan interface
public/app.js - Browser UI assets
public/index.html - Findings and progress
public/app.js
Scan service
- HTTP API
server.js - Target and authorization checks
server.js - Scanner catalog
server.js - Scanner dispatch
server.js - Subdomain scanning
server.js
Security checks
- Headers and browser security
scanners/headerScanner.js - TLS and network
scanners/sslScanner.js - Injection testing
scanners/injectionScanner.js - Content and technology discovery
scanners/infoLeakScanner.js - DNS and subdomains
scanners/dnsScanner.js - Web configuration checks
scanners/corsScanner.js - Performance and rate limits
scanners/performanceScanner.js
Analysis and reports
- AI security analysis
ai/groqAnalyzer.js - PDF export
server.js
Other components
- Scanner user
- Scan target
- Groq API
Connections 22
- Scanner user → Scan interface: submits target
- Browser UI assets → Scan interface: renders
- Scan interface → HTTP API: requests checks
- HTTP API → Target and authorization checks: validates access
- Target and authorization checks → Scan target: checks reachability
- Scan interface → Scanner catalog: fetches catalog
- Scan interface → Scanner dispatch: requests scans
- Scanner dispatch → Headers and browser security: dispatches
- Scanner dispatch → TLS and network: dispatches
- Scanner dispatch → Injection testing: dispatches
- Scanner dispatch → Content and technology discovery: dispatches
- Scanner dispatch → DNS and subdomains: dispatches
- Scanner dispatch → Web configuration checks: dispatches
- Scanner dispatch → Performance and rate limits: dispatches
- Scan interface → Subdomain scanning: requests subdomain scans
- Subdomain scanning → Scan target: scans hosts
- Scan interface → Findings and progress: renders findings
- Scanner dispatch → Findings and progress: returns scan data
- HTTP API → AI security analysis: requests analysis
- AI security analysis → Groq API: sends results
- Scan interface → PDF export: requests report
- AI security analysis → Findings and progress: provides assessment