Aegis Security Scanner
Aegis Security Scanner is a Python-based web security reconnaissance and vulnerability-candidate analysis tool designed for authorized security testing and controlled lab environments.
It helps security researchers discover application structure, endpoints, parameters, HTTP methods, and common security indicators from a single target.
⚠️ IMPORTANT: Use Aegis only against applications that you own or have explicit permission to test.
Features
Reconnaissance
- Target URL analysis
- Same-scope endpoint discovery
- Web crawling
- Parameter discovery
- JavaScript endpoint discovery
- API-style endpoint identification
- HTTP service discovery
- DNS resolution
- HTTP method metadata inspection
Security Analysis
Aegis can identify potential security candidates and configuration issues such as:
- IDOR candidates
- SSRF candidates
- Open-redirect candidates
- Missing security headers
- CORS configuration indicators
- Cookie security issues
- Server-header disclosure
- Information-disclosure indicators
- API endpoints
- PUT/DELETE method advertisements
Reporting
The scanner can generate structured security reports containing:
- Target information
- Discovered endpoints
- Parameters
- Subdomains
- HTTP services
- HTTP request history
- Security findings
- Severity
- Priority
- Scanner limitations
Architecture
Aegis follows a simple security-analysis workflow:
Target
│
▼
Reconnaissance
│
├── Subdomains
├── DNS
└── HTTP Services
│
▼
Crawling
│
├── Pages
├── Endpoints
├── Forms
└── JavaScript
│
▼
Parameter Analysis
│
├── ID-like parameters
├── URL-like parameters
└── Redirect-like parameters
│
▼
Security Analysis
│
├── Headers
├── CORS
├── Cookies
├── HTTP methods
└── Information disclosure
│
▼
Findings
│
▼
JSON / HTML Report
Requirements
- Python 3.9 or newer
- Internet connection for authorized web targets
- Permission to test the target application
Install the Python dependencies:
pip install -r requirements.txt
Installation
Clone the repository:
git clone https://github.com/YOUR_USERNAME/aegis-security-scanner.git
Enter the project directory:
cd aegis-security-scanner
Install dependencies:
pip install -r requirements.txt
Usage
Run the scanner:
python3 main.py
Enter an authorized target when prompted.
Example:
https://your-own-lab.example
The scanner will then perform its supported reconnaissance and security analysis.
Reports
Depending on the scanner version, reports may be generated as:
aegis_report.json
or:
aegis_report.html
These files contain the discovered information and security findings.
Generated reports are intentionally excluded from Git using
.gitignore.
Understanding Findings
Aegis distinguishes between a security indicator and a confirmed vulnerability.
For example:
SSRF_CANDIDATE
means that a parameter appears to accept a server-side URL or URL-like value.
It does NOT automatically mean that the application is vulnerable.
Similarly:
IDOR_CANDIDATE
means that an object/reference-style parameter was discovered and may require authorization-aware verification.
Manual validation is required before treating a candidate as a confirmed vulnerability.
Severity
Aegis uses the following severity levels:
- INFO
- LOW
- MEDIUM
- HIGH
- CRITICAL
Severity is an automated assessment and should be reviewed by a security professional before being used in a formal report.
Security Scope
Aegis is designed for:
- Personal applications
- Local development environments
- CTF/lab environments
- Authorized penetration testing
- Security research with permission
- Educational security testing
Do not scan systems that you do not own or do not have permission to test.
Responsible Use
The author does not encourage unauthorized scanning, exploitation, service disruption, credential attacks, or privacy violations.
Always obtain permission before testing an application.
Limitations
Aegis is an analysis and reconnaissance tool.
A detected candidate is not proof of a vulnerability.
Examples:
IDOR_CANDIDATE
SSRF_CANDIDATE
OPEN_REDIRECT_CANDIDATE
require controlled verification.
Security headers and configuration findings may also require application-specific review.
Roadmap
Planned improvements may include:
- Improved crawling
- Better API discovery
- Scope management
- Request/response history
- Finding deduplication
- Improved reporting
- Authentication-aware testing in controlled environments
- Better JavaScript analysis
- Dashboard improvements
- Export formats
- Plugin architecture
Disclaimer
This project is intended for authorized security testing and educational purposes only.
You are responsible for ensuring that you have permission to test any target used with this software.
License
This project is released under the MIT License.
See LICENSE for details.