How lynch9274927482/socket-x works
Socket-X is a Python website security tester with lightweight subdomain reconnaissance, passive baseline checks, and a more comprehensive aggressive scan. Users start scans through the CLI or interactive/web launcher; the scan produces findings that the launcher can turn into JSON reports. The aggressive scanner covers discovery, injection testing, database-interface and exposed-file checks, and documented SQL-injection exploitation. Its implementation is concentrated in one large module, so those stages share a source path. Some internal orchestration and the README-listed capabilities are not fully visible in the excerpts; those relationships are cited to the README where documented.
Main entry points: aggressive.py Aggressive scan runner · socketx.py Interactive launcher · cli.py CLI commands · report_builder.py Report builder
Components 18
User entry points
- CLI commands
scoutsafe/cli.py - Interactive launcher
socketx.py - Local web controls
socketx.py
Reconnaissance
- Subdomain checks
scoutsafe/recon/subfinder.py
Scanning and discovery
- Baseline checks
scoutsafe/scanner/baseline.py - Aggressive scan runner
scoutsafe/scanner/aggressive.py - Directory discovery
scoutsafe/scanner/aggressive.py - Parameter discovery
scoutsafe/scanner/aggressive.py - SQL injection tests
scoutsafe/scanner/aggressive.py - SQL data extraction
scoutsafe/scanner/aggressive.py - Database interfaces
scoutsafe/scanner/aggressive.py - Exposed-file checks
scoutsafe/scanner/aggressive.py - Scan wordlists
wordlists
Findings and reports
- Report builder
scoutsafe/reporter/report_builder.py - JSON report
Other components
- Operator
- Target website
- Tor proxy
Connections 27
- Operator → CLI commands: runs commands
scoutsafe/cli.py - Operator → Interactive launcher: uses launcher
socketx.py - Interactive launcher → Local web controls: starts controls
socketx.py - CLI commands → Subdomain checks: checks subdomains
scoutsafe/cli.py - CLI commands → Baseline checks: runs baseline
scoutsafe/cli.py - Interactive launcher → Subdomain checks: checks subdomains
socketx.py - Interactive launcher → Baseline checks: runs baseline
socketx.py - Interactive launcher → Aggressive scan runner: starts scan
socketx.py - Local web controls → Aggressive scan runner: starts scan
socketx.py - Aggressive scan runner → Directory discovery: runs discovery
scoutsafe/scanner/aggressive.py - Aggressive scan runner → Parameter discovery: runs fuzzing
scoutsafe/scanner/aggressive.py - Aggressive scan runner → SQL injection tests: tests injections
scoutsafe/scanner/aggressive.py - SQL injection tests → Parameter discovery: tests discovered
scoutsafe/scanner/aggressive.py - Aggressive scan runner → SQL data extraction: extracts data
README.md - Aggressive scan runner → Database interfaces: checks interfaces
README.md - Aggressive scan runner → Exposed-file checks: checks files
README.md - Aggressive scan runner → Scan wordlists: loads lists
scoutsafe/scanner/aggressive.py - Directory discovery → Target website: requests paths
scoutsafe/scanner/aggressive.py - Parameter discovery → Target website: sends probes
scoutsafe/scanner/aggressive.py - SQL injection tests → Target website: sends payloads
scoutsafe/scanner/aggressive.py - SQL data extraction → Target website: requests extraction
scoutsafe/scanner/aggressive.py - Database interfaces → Target website: checks endpoints
scoutsafe/scanner/aggressive.py - Exposed-file checks → Target website: requests files
scoutsafe/scanner/aggressive.py - Aggressive scan runner → Tor proxy: proxies requests
scoutsafe/scanner/aggressive.py - Interactive launcher → Report builder: builds report
socketx.py - Report builder → JSON report: exports JSON
scoutsafe/reporter/report_builder.py - Interactive launcher → JSON report: saves report
socketx.py