w3bs.AccountStart building
PACKAGES / Profullstack

scanner

Web application security scanner CLI with OWASP-oriented checks.

ThreatCrush · No malware found
INSTALLw3bs install profullstack.com/scanner

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install profullstack.com/scannerInstall scanner and track it for updates
  2. scanner tools --checkCheck which underlying security tools are installed
  3. scanner scan <url>Run a security scan against a site you are authorized to test
  4. scanner historyList past scans
  5. scanner report <scanId> --format htmlExport a scan's results as an HTML report

Every option: scanner --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in scanner 1.1.2. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-01 22:56 UTC · threatcrush 0.13.30
Files
28 (installer + github.com/profullstack/scanner)
Findings
1 high · 1 medium · 1 low
3 other findings (not malware)
  • high
    eval on an expanded stringsource/bin/install-security-tools.sh:41sh-eval-expansion · CWE-78
  • medium
    predictable temporary filesource/bin/install-security-tools.sh:166sh-predictable-temp-path · CWE-377
  • low
    Hardcoded Credentialsource/README.md:567secret-generic-credential · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/profullstack.com/scanner/badge.svg)](https://w3bs.org/packages/profullstack.com/scanner)