kingarthurwashere/kyntra-sentinel

Kyntra Sentinel 🛡️ Web & Mobile Security Scanner by Kyntra Technologies · Harare, Zimbabwe A powerful terminal-first security toolkit for scanning web applications, REST APIs, and infrastructure for vulnerabilities and misconfigurations. # Kyntra Sentinel 🛡️ **Web & Mobile Security Scanner** by Kyntra Technologies · Harare, Zimbabwe A powerful terminal-first security toolkit for scanning web applications, REST APIs, and infrastructure for vulnerabilities and misconfigurations. --- ## Installation ```bash # Clone the repository git clone github.com cd kyntra-sentinel # Create and activate virtual environment python3 -m venv .venv source .venv/bin/activate # Install dependencies pip install -r requirements.txt # Install as a CLI tool pip install -e . ``` ## Quick Start Activate the virtual environment first, then run the commands: ```bash # Activate environment source .venv/bin/activate # Scan any website kyntra scan example.com # Scan a Django application kyntra django myapp.com # Scan a Next.js application kyntra nextjs myapp.com # Audit SSL/TLS kyntra ssl example.com # Scan a REST API kyntra api api.example.com # View scan history kyntra history # Regenerate latest report kyntra report latest --format html # Update signatures kyntra update # List plugins kyntra plugins list ``` ## What It Scans | Category | Checks | |-----------------------|--------| | Security Headers | HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, Server disclosure | | SSL/TLS | Certificate validity, expiry, weak ciphers, deprecated protocols, self-signed certs | | Cookie Security | HttpOnly, Secure, SameSite, session expiry | | Sensitive Paths | .env, .git, phpMyAdmin, admin panels, backup files, debug endpoints | | Injection | SQL injection (error-based), XSS, SSTI, open redirects, CORS misconfiguration | | API Security | Unauthenticated endpoints, rate limiting, API key exposure | | Django-Specific | DEBUG mode, admin exposure, CSRF, SECRET_KEY leakage | | Next.js-Specific | Source maps, env leakage, unauthenticated API routes, dev mode | ## Severity L …