Chowkidar: Your Digital Pehredar

Geni_Wazir
4 min readMay 20, 2024

Hello everyone, I am excited to introduce Chowkidar, a platform designed specifically for security enthusiasts and researchers in the field of cybersecurity. Chowkidar automates the scanning process on your behalf, uncovering all security misconfigurations and providing a detailed report for your reference.

When a security engineer begins testing a website, the first step is to run an automated scan on the provided URL. This process helps to expand the attack surface and ensures comprehensive coverage. It also gathers valuable information, such as the type of server being used, the services running on the server, open ports, and any sensitive data or files stored on the server. Chowkidar automates this process, freeing up your time for manual testing by handling the automated scanning on its own.

Key Features

  1. Automated Security Testing:
    +
    Users can initiate security scans by simply inputting their project name and website URL.
    + The platform handles the execution of various security tests using a suite of open-source tools.
  2. Vulnerability Detection:
    +
    Chowkidar scans for a wide range of vulnerabilities, including common issues like DoS Attack, POODLE, SWEET32, LOGJAM, Wordpress vulnerabilities and many more.
    + Continuous updates to the scanning tools ensure the detection of the latest threats.
  3. Detailed Reporting:
    +
    Users receive detailed PDF reports that outline detected vulnerabilities, their severity, and potential impacts.
    + Each report includes actionable recommendations to help users address and mitigate identified risks.
  4. User-Friendly Interface:
    +
    The platform is designed with simplicity in mind, making it accessible to users with varying levels of technical expertise.
    + An intuitive dashboard provides a clear overview of scan results and progress.
    + Users receive email notifications upon completion of a scan, informing them of the results and providing a link to get the detailed report.
  5. Customizable Scans:
    +
    Users can configure scan parameters to tailor the testing process to their specific needs.

How To Use Chowkidar

  1. Login/Register using your Gmail account.
  2. Add a new audit by providing the project name and website URL for the scan. Additionally, select the type of scans you wish to run.
https://chowkidar.xyz/audits/new

3. Initiate the audit to begin the scan from the dashboard.

https://chowkidar.xyz/audits

4. Retrieve a list of all issues discovered for the provided URL.

https://chowkidar.xyz/audits/<audit-name>/vulnerability

5. Analyze the raw output generated by the scanner.

https://chowkidar.xyz/audits/<audit-name>/scan-output

6. Obtain detailed information about the discovered issue, including the recommended fixes.

7. Additionally, you have the option to download a PDF report containing detailed information about all the discovered vulnerabilities.

8. Profile showcasing individual progress and activity.

https://chowkidar.xyz/profile

Setting Up Chowkidar Locally

If you want to set it up locally, you can find the code on GitHub. Follow the steps outlined on GitHub to run it correctly on your localhost. It uses Docker, which simplifies the setup process and prevents version conflicts between dependencies.

You’re encouraged to contribute to the project and participate in its ongoing updates and improvements.

--

--