Analysis Modules
WebQ's security engine is powered by web-analyzer, a modular Rust crate with 15 feature-gated analysis modules organized into three security pillars.
Intelligence Gathering
Domain Info
WHOIS, SSL certs, DNS, port scanning, and composite security scoring.
DNS Records
A, AAAA, MX, NS, SOA, TXT, CNAME resolution via system dig.
SEO Analysis
13 analysis categories, schema markup detection, and tracking tool identification.
Web Technologies
10 servers, 8 backend, 7 frontend, 12 JS libs, 11 CMS, 9 e-commerce, 8 WAF detection.
Reconnaissance
Subdomain Discovery
Subfinder integration with deduplication and multi-part TLD support.
Contact Spy
BFS crawl, email/phone/social extraction (15 platforms) with validation.
Content Scanner
24 secret patterns, 13 JS vuln checks, SSRF detection, sensitive file enumeration.
Security Assessment
Security Analysis
WAF detection (7 providers), SSL grading A+ to F, CORS & cookie analysis.
Subdomain Takeover
36-service vulnerability DB with 5 detection cases and exploitation difficulty ratings.
API Security Scanner
9 test suites: SQLi, XSS, SSRF, path traversal, CORS, auth, rate limiting.
Nmap Zero-Day
Nmap integration, NVD CVE lookup, Exploit-DB correlation, CVSS severity mapping.