Download
BlackWidow is a Python-based web application scanning tool designed to crawl target websites and collect open-source intelligence (OSINT) while identifying potential security vulnerabilities. It functions as a web spider that systematically explores a site to gather valuable information such as URLs, dynamic parameters, subdomains, email addresses, and phone numbers associated with the target domain. By automatically extracting this data, BlackWidow helps security professionals and researchers build a clearer understanding of a website’s structure and publicly accessible information. In addition to information gathering, the project includes a built-in fuzzing component called Inject-X, which tests dynamic URLs for common vulnerabilities listed in the OWASP Top 10. The scanner analyzes parameters and injects payloads to detect issues such as SQL injection, cross-site scripting (XSS), and open redirect vulnerabilities.
Features
- Crawls target websites to automatically collect all discovered URLs
- Identifies and extracts dynamic URLs and parameters for further analysis
- Discovers subdomains associated with the target domain
- Collects contact information such as email addresses and phone numbers found on the site
- Includes the Inject-X fuzzer to test parameters for common OWASP vulnerabilities
- Saves all gathered data and scan results into organized text files for review
Project Samples
