CyScore is a security utility that evaluates the theoretical security level of a website using a scoring algorithm to help users better understand their web security posture.
CyScore est un utilitaire de sécurité destiné à l'évaluation du niveau théorique de sécurité d’un site en utilisant un algorithme basé sur la notation afin que l’utilisateur ait une meilleure compréhension du niveau de sécurité web.
CyScore is designed for users who want to assess and understand the security level of their websites through an accessible scoring system and simplified pentesting tools. It is suitable for both offensive and defensive security assessments, providing automated guidance for server protection and vulnerability analysis. The tool targets users ranging from beginners to intermediate security practitioners seeking an easy-to-use web security evaluation and pentesting suite.
The tool is still in early development with minimal community adoption (1 star, 1 fork). Users should ensure they have Nmap and Metasploit properly installed for full functionality. The Java GUI targets Windows users, while Python scripts are intended for Linux distributions. The scoring algorithm covers common web security criteria but may require customization for specific environments.
Clone the repository from GitHub
For Windows users, run the Java Swing application (CyScore Analytics)
For Linux users, run the Python-based tools
Ensure Nmap and Metasploit libraries are installed and configured for pentesting features
Follow provided documentation for setting up dependencies and environment
Scan Simple
Performs a basic scan of the target server
Scan Vulnérabilité
Executes a vulnerability scan using integrated libraries
Traceroute
Performs a traceroute analysis to map network path
Scan Web
Conducts a web-specific scan to identify web vulnerabilities
Searchploit
Searches for exploits related to the target using Searchsploit