Simple Vulnerability Scanner (Demo)

Simple Vulnerability Scanner is a small educational demo that shows how a web frontend can send a URL to a Flask backend, which performs very basic heuristic checks and returns a short report.
This project is for learning and demonstration only — it is not a real security scanner and should never be used in place of professional tools.

---

Features

• Small Flask backend that exposes POST /scan
• Basic heuristic checks (demo-only):
  • Detects possible admin paths
  • Detects presence of query strings (possible injection vectors)
  • Detects insecure http scheme
  • Flags suspicious characters commonly seen in injection attempts
• Minimal front-end (index.html + script.js) for manual testing
• Simple self-contained project suitable for beginners learning Flask + frontend API calls

---

Demo screenshots

(Optional: add screenshot(s) to the repo and reference them here)

---

Getting started

Prerequisites

• Python 3.8+
• git
• (Recommended) virtual environment

Install & run (Linux/macOS)

# clone the repo (or copy files into a folder)
cd /path/to/project

# (recommended) create a venv and activate it
python3 -m venv venv
source venv/bin/activate

# install dependencies
python -m pip install --upgrade pip
python -m pip install -r requirements.txt

# start the server
python vuln_app.py