I open-sourced a Docker security scanner I use to audit all my websites
One command and you get the full picture:
docker exec web_audit_scanner_d13 sh /app/tools/scanner.sh https://yoursite.com
Gives you whois, DNS, open ports, SSL/TLS vulns, tech stack, hidden dirs, WAF detection, and headers.
- Runs in a Debian Docker container
- Timestamped logs per scan
- Pick individual tools or run everything
- Two files execute code. That's it. Glance at them and you know it's safe
Link: https://github.com/alvesandreiolv/web_audit_scanner_d13
Please be gentle, I'm not a super hacker expert like you guys.