⚠️ DISCLAIMER: This is an unsupported, throwaway project created to scratch a personal itch. I will not be maintaining it, providing support, or accepting issues/PRs. Use at your own risk.
A simple web interface for running vulnerability scans on domains using free tools from ProjectDiscovery, TruffleHog, and others. Built with FastAPI and PostgreSQL.
Scanny provides a web interface to:
- Manage domain scanning configurations
- Run vulnerability scans using popular security tools
- View and track scan results over time
- Scale scanning workers for parallel execution
- Docker and Docker Compose
Candidly, this is a bit of a mess, but if you search through the codebase, there are various DB connection strings, Docker Compose files, and .env files in the app and worker directories where you will need to set up your database connection and other environment variables.
cd app
docker-compose up -dThis starts:
- PostgreSQL database on port 5432
- Web interface on http://localhost:8000
Given that the traffic that Scanny generates for its scans looks very suspicious, I don’t recommend running it without using some kind of VPN, VPS, or have some other anonymizing measures in place around each worker node.
That way you don’t get put into some blacklisted reputation database and have your IP address blocked by various services.
cd worker
# Start workers (scale as needed)
docker-compose up -d --scale worker=4Navigate to http://localhost:8000 and log in with your credentials.
Nuclei is a memory hog. I would recommend reserving 1 GB of memory for each worker container that you plan to run.
Run multiple workers for parallel scanning:
cd worker
docker-compose up -d --scale worker=8This was built for personal use. Don't use this in production.
This project was created to solve a specific personal need and is shared as-is. I will not:
- Provide technical support
- Fix bugs or issues
- Accept feature requests
- Merge pull requests
- Maintain documentation beyond this README
If you find it useful, great! If you encounter issues, you're on your own to debug and fix them.
Use at your own risk. No warranty provided.