web-analyzer 0.1.0

🚀 Quick Start

cargo add web-analyzer

Or add to your Cargo.toml:

[dependencies]
web-analyzer = "0.1"
tokio = { version = "1", features = ["full"] }

use web_analyzer::domain_info::get_domain_info;

#[tokio::main]
async fn main() {
    let info = get_domain_info("example.com").await.unwrap();
    println!("IP: {:?}, Score: {}/100", info.ipv4, info.security_score);
}

Selective features: cargo add web-analyzer --no-default-features --features domain-info,security-analysis

✨ Features

• 15 modular analysis modules organized in 3 security pillars
• Feature-gated compilation — include only what you need
• Fully async — built on Tokio for concurrent analysis
• Zero Python dependencies — pure Rust with system tool integration
• Comprehensive output — all results serialize to JSON via Serde
• WordPress deep analysis — version, theme, plugins, user enumeration, XMLRPC
• 36-service subdomain takeover DB with exploitation difficulty ratings
• Parallel bulk domain validation with atomic counters

📦 Module Overview

🔎 Intelligence Gathering

🕵️ Reconnaissance

🛡️ Security Assessment

📚 Full documentation index: docs/readme.md

🚀 Quick Start

Installation

git clone https://github.com/keyvanarasteh/web-analyzer.git
cd web-analyzer
cargo build --all-features

Usage

use web_analyzer::domain_info::get_domain_info;
use web_analyzer::security_analysis::analyze_security;
use web_analyzer::web_technologies::detect_web_technologies;
use web_analyzer::subdomain_takeover::check_subdomain_takeover;

#[tokio::main]
async fn main() {
    let domain = "example.com";

    // Domain intelligence
    let info = get_domain_info(domain).await.unwrap();
    println!("IP: {:?}", info.dns_info.a_records);

    // Security posture
    let security = analyze_security(domain).await.unwrap();
    println!("Grade: {} ({}/100)", security.grade, security.security_score);

    // Technology fingerprinting
    let tech = detect_web_technologies(domain).await.unwrap();
    println!("Server: {} | CMS: {:?}", tech.web_server, tech.cms);

    // Subdomain takeover check
    let subs = vec!["blog.example.com".into(), "shop.example.com".into()];
    let takeover = check_subdomain_takeover(domain, &subs).await.unwrap();
    println!("Vulnerable: {}", takeover.statistics.vulnerable_count);
}

⚙️ Feature Flags

Include only what you need:

[dependencies]
web-analyzer = { version = "0.1.0", features = ["domain-info", "security-analysis"] }

# Intelligence Gathering
domain-info = []
domain-dns = []
seo-analysis = []
web-technologies = []
domain-validator = []

# Reconnaissance
subdomain-discovery = []
contact-spy = []
advanced-content-scanner = []

# Security Assessment
security-analysis = []
subdomain-takeover = []
cloudflare-bypass = []
nmap-zero-day = []
api-security-scanner = []
geo-analysis = []

🔧 External Dependencies

🏗️ Build

# All modules
cargo build --all-features

# Specific modules only
cargo build --features "domain-info,security-analysis,web-technologies"

# Release build
cargo build --all-features --release

# Run tests
cargo test --all-features

📁 Project Structure

web-analyzer/
├── Cargo.toml                        # Dependencies & feature flags
├── README.md                         # This file
├── src/
│   ├── lib.rs                        # Module registry (feature-gated)
│   ├── payloads.rs                   # Compile-time embedded payloads
│   │
│   │── domain_info.rs                # WHOIS, SSL, DNS, ports
│   │── domain_dns.rs                 # DNS record queries
│   │── seo_analysis.rs               # SEO (13 categories)
│   │── web_technologies.rs           # Tech fingerprinting (16 categories)
│   │── domain_validator.rs           # Bulk domain validation
│   │
│   │── subdomain_discovery.rs        # Subfinder integration
│   │── contact_spy.rs                # Contact info extraction
│   │── advanced_content_scanner.rs   # Secret & vuln scanning
│   │
│   │── security_analysis.rs          # Security posture assessment
│   │── subdomain_takeover.rs         # Takeover vulnerability detection
│   │── cloudflare_bypass.rs          # Origin IP discovery
│   │── nmap_zero_day.rs              # CVE & exploit detection
│   │── api_security_scanner.rs       # API vulnerability testing
│   └── geo_analysis.rs              # AI/LLM readiness
│
├── docs/                             # Module documentation (14 files)
│   ├── readme.md                     # Documentation index
│   └── [module_name].md
│
├── payloads/                         # Static payload files
└── tests/                            # Integration tests

📊 Stats

👤 Author