CVE Enterprise is a Python-based web security scanner designed to detect vulnerabilities (CVEs) in servers and web applications. This project uses fingerprinting, non-destructive validation, and intelligent risk scoring to help security teams quickly identify potential issues.

• HTTP probing & response capture
• Web server fingerprinting (Apache / Nginx) + confidence score
• CVE matching based on product & version
• Safe validation (non-destructive checks)
• Risk scoring (CVSS, KEV, exposure, confidence)
• Evidence collection per CVE & target
• Report (table) & JSON export
• Target deduplication & configurable scanning

Clone the Repository:

git clone https://github.com/fitri-hy/cve-scanner.git
cd cve-scanner

Set Up Virtual Environment:

python -m venv venv

# Windows
venv\Scripts\activate

# Linux / Mac
source venv/bin/activate

Install Dependencies:

pip install -r requirements.txt

Running the Scanner:

python -m app.main

Add the web targets you want to scan in data/targets.txt, one URL per line, for example:

http://testphp.vulnweb.com
http://demo.testfire.net
https://expired.badssl.com