How yaswantpandey/sudarshan-ai-web-vulnerability-scanner works
SUDARSHAN is an AI-assisted web application security scanner. The CLI configures a scan, then the scanner coordinates reconnaissance and vulnerability testing, optionally performs OWASP and attack-chain analysis, applies AI analysis, and generates a report. The README also advertises GUI and web interfaces, API security testing, crawling, and validation; these are retained as capabilities, but their wiring is not established by the sampled source. The graph focuses on documented runtime stages and sampled calls; some integration paths are intentionally omitted where excerpts do not show who invokes them.
Main entry points: scanner_engine.py Scanner engine · main.py CLI entry · reconnaissance.py Reconnaissance · owasp_scanner.py OWASP tests
Components 19
User interfaces
- CLI entry
main.py - Desktop GUI
sudarshan_gui.py - Web interface
sudarshan.py
Scan orchestration
- Scan config
core/config.py - Scanner engine
core/scanner_engine.py
Recon and testing
- Reconnaissance
modules/reconnaissance.py - Web crawling
modules/web_crawler.py - Vulnerability tests
modules/vulnerability_scanner.py - OWASP tests
modules/owasp_scanner.py - API security
modules/api_security.py - Finding validation
modules/advanced_validator.py
Analysis and reporting
- Attack chains
modules/chain_attacks.py - AI analysis
core/ai_engine.py - Risk scoring
utils/risk_calculator.py - Report generation
utils/report_generator.py
Other components
- Operator
- Target web app
- Ollama service
- Scan report
Connections 17
- Operator → CLI entry: starts scan
- Operator → Desktop GUI: uses
- Operator → Web interface: uses
- CLI entry → Scan config: sets options
- CLI entry → Scanner engine: starts scan
- Scanner engine → Reconnaissance: runs recon
- Scanner engine → OWASP tests: runs tests
- Scanner engine → AI analysis: requests analysis
- Scanner engine → Report generation: generates report
- Reconnaissance → Target web app: queries
- Vulnerability tests → Target web app: tests
- OWASP tests → Target web app: tests
- Reconnaissance → Target web app: discovers
- AI analysis → Ollama service: queries
- Report generation → Scan report: writes
- Web crawling → Target web app: crawls
- API security → Target web app: tests