run-full-scan

name	run-full-scan
description	Orchestrate a complete penetration test using all pentest skills — recon, headers, vuln scan, source audit, and report generation.

Full Penetration Test

Orchestrates all pentest skills into a complete assessment workflow.

Usage

bash scripts/full-scan.sh <target-url> [source-dir] [output-dir]
# Example: bash scripts/full-scan.sh http://resume.selfhosted.svc.cluster.local:8080 /tmp/developer-portfolio /tmp/pentest-results

Workflow

1. Web Recon — Port scan, tech detection, directory enum, SSL scan
2. Header Analysis — Security headers, cookies
3. Vulnerability Scan — Nuclei, nikto, OWASP checks
4. Source Audit (if source dir provided) — Dependencies, secrets, config, Dockerfile
5. Report Generation — Aggregated markdown report

Output

All individual scan results are saved as JSON in the output directory. Final report is written as pentest-report.md in the output directory.