Fast DAST CLI tool, written in Rust.
git clone https://github.com/MindPatch/scant3r && cd scant3r
cargo install --path .# pipe a target, run all modules
echo "http://testphp.vulnweb.com/listproducts.php?cat=1" | scant3r -m all
# targets list, JSON report, 100 workers
scant3r -l targets.txt -m xss,ssti -w 100 -o report.json
# through Burp, with cookies
scant3r -u "http://target.com/search?q=1" -m all -p http://127.0.0.1:8080 -C "session=abc123"Run scant3r --help for all options.
| module | description |
|---|---|
| xss | reflected XSS with context-aware payloads |
| ssti | Server-Side Template Injection |
| req_callback | out-of-band resource load / blind SSRF (interact.sh) |
| firebase | public Firebase databases (read/write) |
New module = one trait in src/modules/mod.rs.
- More modules: SQLi, path traversal, RCE, open redirect
- AI payload generation (context/WAF-aware, replaces static wordlists)
- AI triage of findings (fewer false positives)
- REST API mode
- Headless-browser module