give an example of creation of tool that test web applications for security vulnerabilities in python

Here is a simple example of how you can create a tool in Python to test web applications for security vulnerabilities:

main.py
import requests

def test_sqli(url):
    payload = "' OR '1'='1"
    response = requests.get(url + "?param=" + payload)
    
    if "Error" in response.text:
        print("Vulnerable to SQL Injection")
    else:
        print("Not vulnerable to SQL Injection")

def test_xss(url):
    payload = "<script>alert('XSS')</script>"
    response = requests.get(url + "?param=" + payload)
    
    if "<script>alert('XSS')</script>" in response.text:
        print("Vulnerable to XSS")
    else:
        print("Not vulnerable to XSS")

# Example usage
test_sqli("http://example.com/login")
test_xss("http://example.com/comment")

624 chars
25 lines

This example demonstrates two common security vulnerabilities: SQL injection (test_sqli function) and Cross-Site Scripting (XSS) (test_xss function). The code uses the requests library to send GET requests to the specified URLs with crafted payloads. Based on the response, it identifies if the application is vulnerable to the specific vulnerability.

Note that this is a basic example, and in a real-world scenario, you would need to customize and expand the tool to handle a wider range of security vulnerabilities and edge cases. Additionally, it's important to have permission from the application owner before running any security testing.