Web App Vulnerability Scanner

Automated web application security tool performing targeted vulnerability assessments for SQL injection, cross-site scripting, and server misconfigurations. Features a Flask-based web interface for scan configuration and comprehensive HTML/PDF reporting with severity classifications. Challenge: Minimizing false positives in vulnerability detection across varying web architectures — different frameworks, templating engines, and WAF configurations produce wildly different response patterns. Solution: Developed a custom regex-based scanning engine with recursive payload testing that adapts its detection strategy based on initial response fingerprinting. Implemented a confidence scoring system that categorizes findings by severity and likelihood, resulting in a 35% improvement in detection accuracy compared to baseline open-source scanners.