WebScan Pro: A High‑Performance Multithreaded Visual Site Directory Scanner

Tool Overview

WebScan Pro is a website directory scanner for security researchers and penetration testers. It employs a modular architecture, a multithreaded scanning engine based on connection pooling, and a graphical user interface (GUI) to discover hidden resources, unauthorized interfaces, and sensitive files.

Core Benefits

Efficient discovery – connection‑pool‑based multithreaded scanning accelerates scan speed.

Flexibility – provides both command‑line (CLI) mode and a modern GUI.

Real‑time monitoring – visual display of scan progress, status‑code distribution, and network response.

Internationalization – built‑in Chinese/English interface with one‑click language switching.

System Requirements

Operating systems: Windows 10/11, macOS, Linux (e.g., Ubuntu, CentOS).

Runtime: Python 3.6 or newer.

Dependencies: PyQt6, requests, rich, colorama.

Installation

Obtain the source code and extract it to a local directory.

# Assuming the project is in the webscan directory
cd webscan

Install required Python packages. pip install -r requirements.txt Verify the installation by displaying help information.

python webscan.py --help

Standard Usage Flow

GUI Mode (recommended)

Start the program. python webscan_gui.py Configure parameters:

Enter the target URL, e.g., http://example.com.

Select one or more dictionaries via “Select Dictionaries”.

Adjust Threads (recommended 50‑100) and Timeout according to network conditions.

Click “Start Scan” to begin.

Monitor progress; pause if needed by clicking “Pause”.

After completion, the log window shows the report’s save path.

CLI Mode

Basic usage:

python webscan.py -u http://target.com -d dictionary/common_dirs.txt

Advanced usage (specify threads, timeout, and random delay):

# 50 threads, 5‑second timeout, 0.5‑second random delay
python webscan.py -u http://target.com -d dictionary/common_dirs.txt,dictionary/common_files.txt -t 50 --timeout 5 --delay 0.5

Best‑Practice Recommendations

To avoid bans on heavily protected targets, reduce threads to 10‑20 and set Delay to 1‑2 seconds.

Start with a small dictionary for quick fingerprinting, then switch to larger, targeted dictionaries.

Pay special attention to 3xx redirects and 403 forbidden paths, as they often contain valuable information.

Tool Acquisition

Repository: https://github.com/benbenbendang/WebScan-Pro