Vulnerability Detection System This project is a security-focused system designed to improve the safety of web applications by identifying and mitigating common vulnerabilities like SQL injection, weak passwords, and malicious file uploads. The system uses Python and Flask for backend services, MySQL for data management, and features a user-friendly web interface.
Key Features SQL Injection Detection:
Real-time detection and prevention. Input validation and sanitization. Logs details including IP address and browser details upon detection. Password Strength Recommendation:
Provides feedback on password strength based on complexity rules. Visual strength meter to guide users in choosing stronger passwords. Malicious File Upload Detection:
Scans and restricts certain file types. Prevents uploading of potentially harmful files. Real-Time Monitoring:
Comprehensive logging for SQL injection attempts and other attacks. Browser, IP address, and location details recorded for each detected attack. Technologies Used Frontend: HTML, CSS, JavaScript Backend: Flask, Python, MySQL Tools: Postman for API testing, ngrok for secure tunnel testing Installation Prerequisites:
Python 3.8 or higher MySQL server Flask and other required Python libraries (requirements.txt) Setting Up:
bash Copy code pip install -r requirements.txt Configure MySQL database as per the structure provided in the documentation. Running the Application:
bash Copy code python app.py Access the application at http://localhost:5000. Usage User Registration and Login:
Register a new user account with secure password creation feedback. Log in with your credentials to access the main dashboard. File Upload:
Upload files with real-time security checks. Viewing Logs:
SQL injection attempts and other security logs are available for monitoring. Testing Unit tests for password strength, input validation, and SQL injection detection are available. Use pytest to run all tests: bash Copy code pytest Postman collections are provided for testing API responses. Future Enhancements Integration with AI for improved threat detection. Expanded authentication with multi-factor support. Enhanced user interface for better usability.