AI-Assisted Vulnerability Assessment & Penetration Testing Tool
Network Scanner is an open-source security scanning platform that combines traditional penetration testing tools with artificial intelligence to provide comprehensive vulnerability assessments. Designed for beginners, researchers, and security professionals, it offers automated reconnaissance, intelligent analysis, and detailed reporting.
Overview of scan statistics, recent activity, and quick actions. Metric cards summarise total scans, vulnerabilities found, and active projects at a glance.
Configure and launch scans against a target. Tabs let you switch between subdomain enumeration, port scanning, vulnerability assessment, DNS enumeration, and WHOIS lookup. Learning Mode toggles educational explanations for beginners.
Browse previous scan results with filters by type and severity. Each entry links to the detailed findings and the AI analysis produced alongside the scan.
Chat interface backed by OpenAI. Ask for explanations of vulnerabilities, prioritisation guidance, or remediation steps. Quick Questions provide one-click prompts for common security topics.
List of generated security assessment reports. Filter by type, search by target, and download as PDF or HTML.
Configure API keys, default scan parameters, report format, security options, and advanced behaviour. Settings persist across sessions via the browser.
A generated HTML report rendered in the browser. The same content can be exported as PDF for stakeholder distribution.
| Category | Features |
|---|---|
| Reconnaissance | Subdomain finder, WHOIS lookup, port scanning, DNS enumeration |
| AI Assistant | OpenAI-powered analysis of scan results with fallback mode |
| Automation | Comprehensive scans via CLI or web interface |
| Reports | Generates PDF and HTML reports |
| Learning Mode | Educational explanations for students and beginners |
| API Ready | RESTful API for integration and automation |
| Docker | Containerised deployment via docker-compose |
- Python 3.8+ and pip
- Node.js 16+ and npm
- nmap, dnsutils, whois (installed automatically)
# Clone the repository
git clone https://github.com/frangelbarrera/Network-Scanner.git
cd Network-Scanner
# Run the installation script (Ubuntu/Debian)
chmod +x scripts/install.sh
./scripts/install.sh
# Or install manually:
# Backend setup
cd backend
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
# Frontend setup
cd ../frontend
npm install
# CLI setup
cd ../cli
pip3 install -r requirements.txt
chmod +x network_scanner_cli.py# Copy and edit environment file
cp .env.example .env
# Edit .env with your settings (API keys, database config, etc.)Start the Backend API:
cd backend
source venv/bin/activate
python app.py
# API available at http://localhost:5000Start the Frontend (new terminal):
cd frontend
npm start
# Web interface at http://localhost:3000Use the CLI:
# Add to PATH or use directly
python cli/network_scanner_cli.py --help
# Example scans
python cli/network_scanner_cli.py subdomain example.com
python cli/network_scanner_cli.py port 192.168.1.1 --port-range 1-1000
python cli/network_scanner_cli.py vuln https://example.com --scan-type web- Dashboard: View scan statistics, recent results, and quick actions
- Scanner: Configure and run different types of security scans
- Results: Analyze findings with AI-powered insights
- Reports: Generate professional security assessment reports
- AI Assistant: Chat with AI for security advice and explanations
# Comprehensive subdomain enumeration
python cli/network_scanner_cli.py subdomain target.com --output results.json
# Port scan with custom range
python cli/network_scanner_cli.py port 10.0.0.1 --port-range 1-65535
# Web application vulnerability assessment
python cli/network_scanner_cli.py vuln https://target.com --scan-type comprehensive
# DNS reconnaissance
python cli/network_scanner_cli.py dns target.com
# Generate professional report
python cli/network_scanner_cli.py report results.json --format pdfimport requests
# Start a subdomain scan
response = requests.post('http://localhost:5000/api/scan/subdomain',
json={'domain': 'example.com'})
result = response.json()
# Get AI analysis
ai_response = requests.post('http://localhost:5000/api/ai/chat',
json={'message': 'Explain this vulnerability',
'context': result})Network Scanner follows a modular architecture:
Network-Scanner/
├── backend/ # Python Flask API server
│ ├── app.py # Main application
│ ├── modules/ # Scanning and AI modules
│ └── models/ # Database models
├── frontend/ # React web interface
│ ├── src/
│ └── components/
├── cli/ # Command-line interface
├── reports/ # Generated reports
├── docs/ # Documentation
└── scripts/ # Installation and utility scripts
- Reconnaissance Module: Subdomain enumeration, port scanning, DNS/WHOIS lookups
- AI Assistant: OpenAI integration for intelligent analysis and recommendations
- Vulnerability Scanner: Web app and network service security assessment
- Report Generator: Professional PDF/HTML report creation
- Multi-user System: Authentication, projects, and audit logging
- Brute force common subdomains
- Certificate Transparency log search
- DNS zone transfer attempts
- AI analysis of discovered subdomains
- TCP/UDP port discovery
- Service version detection
- Operating system fingerprinting
- Risk assessment of open services
- Web application security testing
- Network service vulnerability detection
- SSL/TLS configuration analysis
- Security header verification
- A, AAAA, MX, NS, TXT record collection
- DNS zone information gathering
- Email server discovery
- Infrastructure mapping
- Domain registration information
- Ownership and contact details
- Name server identification
- Expiration date monitoring
Network Scanner integrates AI to enhance security assessments:
- Intelligent Analysis: Automatically interprets scan results
- Risk Assessment: Prioritizes findings by severity and impact
- Remediation Guidance: Provides specific fix recommendations
- Learning Mode: Explains techniques for educational purposes
- Contextual Chat: Interactive AI assistant for security questions
Generate professional security reports in multiple formats:
- HTML Reports: Interactive web-based reports with charts
- PDF Reports: Professional documents for stakeholders
- JSON Exports: Machine-readable data for integration
- Executive Summaries: High-level findings for management
Important: Network Scanner is designed for authorized security testing only.
- Only scan systems you own or have explicit permission to test
- Some scans may be detected by security systems
- Follow responsible disclosure practices
- Respect rate limits and target system resources
- Review local laws and regulations before testing
We welcome contributions! Please see CONTRIBUTING.md for guidelines.
# Clone and setup development environment
git clone https://github.com/frangelbarrera/Network-Scanner.git
cd Network-Scanner
# Install dependencies
pip install -r backend/requirements.txt
pip install -r cli/requirements.txt
cd frontend && npm install && cd ..
# Run the regression tests
cd backend
python -m unittest tests.test_regression -v- Documentation: Wiki
- Bug Reports: Issues
- Discussions: GitHub Discussions
- Built with Flask, React, and modern web technologies
- Integrates nmap, dnspython, and other security tools
- UI components from Material-UI
- Charts powered by Recharts
- AI capabilities via OpenAI API
Network Scanner is for educational and authorized testing purposes only. Users are responsible for complying with applicable laws and obtaining proper authorization before scanning any systems. The developers assume no liability for misuse of this tool.
Made with ❤️ for the cybersecurity community