Agent skill · security · aradotso
web-security-scanner-pro
Advanced Python web security scanner with 49 modules, evasion engine, CVE database, and WAF bypass for penetration testing
Why this skill is useful
Adds executable scripts for advanced web vulnerability scanning and WAF evasion that are not commonly known or documented.
What it needs
Requires beautifulsoup4, flask, jinja2, python, pyyaml, reportlab, requests installed locally. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Web Security Scanner Pro Skill Skill by ara.so — Security Skills collection. Expert skill for using Web Security Scanner Pro, a comprehensive Python-based web security scanner with 49 modules for vulnerability detection, WAF evasion, and automated security testing. What This Project Does Web Security Scanner Pro (WSA Pro) is an open-source security testing tool that: Scans for 49 vulnerability types including XSS, SQLi, LFI, RFI, XXE, SSTI, CSRF, command injection Tests CMS platforms (WordPress with 9 modules, Joomla, Drupal) Detects misconfigurations in web servers (Apache, Nginx, IIS, LiteSpeed, Tomcat) Identifies vulnerable software via built-in CVE database (2024-2026) Evades detection with WAF bypass, user-agent rotation, rate limiting, proxy support Generates professional reports in HTML, PDF, Markdown, and JSON formats Provides REST API for automation and CI/CD integration The scanner includes advanced SQL injection detection (error-based, boolean-blind, time-based blind, UNION-based) and can identify 9 different WAFs (Cloudflare, Sucuri, ModSecurity, etc.). Installation Prerequisites Dependencies The project requires these key Python packages: requests - HTTP client beautifulsoup4 - HTML parsing pyyaml - Configuration jinja2 - Report templates reportlab - PDF generation flask - REST API server Key Commands Basic Usage Module Categories Configuration config.yaml Structure Environment Variables Python API Usage Programmatic Scanning Custom Module Development Advanced SQL Injection Testing WAF Detection and Bypass Report Generation CVE Database Queries REST API Usage Start API Server API Endpoints Common Patterns WordPress Security Audit Stealth Scanning for Protected Sites Automated CI/CD Integration Batch Scanning Multiple Targets Troubleshooting Connection Issues WAF Blocking Module Errors Rate Limiting Memory and Performance Legal and Ethical Guidelines CRITICAL: Only scan targets you own or have explicit written authorization to test. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/web-security-scanner-pro