alvesandreiolv / web_audit_scanner_d13

What is web_audit_scanner_d13?

A Debian-based Docker container that bundles a full suite of website security scanning tools into one place. You point it at a domain you own and it runs multiple checks: WHOIS registration lookup, DNS records, port scanning, SSL/TLS analysis, directory enumeration, WAF detection, HTTP header inspection, and vulnerability scanning. Everything runs through a single shell script entrypoint, with results written to timestamped log files on your host machine.

Why is it gaining traction?

The container drops all Linux capabilities by default, then selectively re-enables only what each tool needs to function. This is rare defensive thinking for a one-person security project. You also get solid documentation that encourages users to read the two files that actually execute before running anything. The ability to skip slow tools like directory brute-forcing or full port scans with simple prefix flags is genuinely useful when you need quick audits versus deep scans.

Who should use this?

Developers and DevOps engineers auditing websites they own or manage. Security-conscious teams that want a repeatable scanning baseline without installing each tool individually. Not suitable for beginners who lack understanding of what port scanning or directory enumeration does on a network.

Verdict

Use it for learning and local audits. At 19 stars with a 0.699999988079071% credibility score, this is a young project that deserves watching but not production trust yet. The author's transparency about safety and capability hardening is admirable. Just remember: scans reveal your real IP address, so never point this at infrastructure you do not own.