How hpperr/pentest_vuln- works
PenTest_Vuln is a single-file web vulnerability assessment framework. Its principal workflow is to accept a target, crawl and assess it, then produce a report; documented capabilities also include safe-by-default testing, broad vulnerability coverage, CVE/CWE knowledge, and CLI or interactive use. The excerpt shows the engine invoking crawling, the crawler using the HTTP client, CVE lookup against NVD, and HTML report generation. Other links reflect README-level claims; internal wiring for unsampled code cannot be verified.
Main entry points: pentest_vuln.py Scanner Engine
Components 15
User Entry
- CLI and Interactive Modes
pentest_vuln.py
Assessment
- Scanner Engine
pentest_vuln.py - Safe Scan Context
pentest_vuln.py - HTTP Client
pentest_vuln.py - Crawl and Discovery
pentest_vuln.py - Vulnerability Checks
pentest_vuln.py - Vulnerability Coverage
pentest_vuln.py
Vulnerability Intelligence
- CVE Cache
pentest_vuln.py - NVD Service
- CWE Knowledge Base
pentest_vuln.py
Results
- Scan Results
pentest_vuln.py - Interactive HTML Report
pentest_vuln.py - Remediation Guidance
pentest_vuln.py - CI/CD Integration
pentest_vuln.py
Other components
- Operator
Connections 14
- Operator → CLI and Interactive Modes: starts scan
README.md - CLI and Interactive Modes → Scanner Engine: configures scan
pentest_vuln.py - Scanner Engine → Safe Scan Context: sets scan context
pentest_vuln.py - Scanner Engine → Crawl and Discovery: crawls target
pentest_vuln.py - Crawl and Discovery → HTTP Client: fetches pages
pentest_vuln.py - Scanner Engine → Vulnerability Checks: assesses target
pentest_vuln.py - Vulnerability Checks → Vulnerability Coverage: covers tests
README.md - Scanner Engine → CVE Cache: uses CVE data
pentest_vuln.py - CVE Cache → NVD Service: fetches records
pentest_vuln.py - Vulnerability Checks → CWE Knowledge Base: maps weaknesses
pentest_vuln.py - Scanner Engine → Scan Results: records findings
pentest_vuln.py - Scan Results → Interactive HTML Report: generates report
pentest_vuln.py - Interactive HTML Report → Remediation Guidance: includes guidance
README.md - Scan Results → CI/CD Integration: provides scan data
pentest_vuln.py