Misconf ✷

Misconf v1.0 is a lightweight and modular scanner for detecting common framework misconfigurations in web applications.

Features

• Modular scanning engine
• Framework-specific checks (Laravel)
• Clean CLI interface
• Severity-based results

Supported Checks (Laravel)

• Debug mode exposure
• .env file exposure
• Missing security headers
• CORS misconfigurations
• Rate limit misconfigurations

Installation

git clone https://github.com/cursedwind/misconf.git
cd misconf
pip install -r requirements.txt

Usage

python main.py -u https://example.com

Example Output

• CLI Interface

---

• Scan Result (example.com)

Project Structure

misconf/
├── img/
│   ├── cli-output.png
│   └── scan-example.png
│
├── misconf/
│   ├── __init__.py
│   ├── cli.py
│   ├── checks/
│   │   └── laravel/
│   │       ├── __init__.py
│   │       ├── cors.py
│   │       ├── debug.py
│   │       ├── env.py
│   │       ├── headers.py
│   │       └── ratelimit.py
│   └── core/
│       ├── engine.py
│       ├── http.py
│       └── result.py
│
├── .gitignore
├── main.py
├── pyproject.toml
├── README.md
└── requirements.txt

Disclaimer

Use this tool only on systems you own or have permission to test.

---

Version

v1.0 – Initial release

---