Your site is leaking. We find it before the hackers do. Build With Bharat 2.0 · CyberSecurity Track · Team CODE COMBAT
Paste a URL → an AI agent attacks it like a hacker (OWASP Top-10) → a live terminal streams the scan → a dashboard shows every leak with proof → get plain-language fixes → re-scan to confirm it's fixed.
🔗 https://breachlab.vercel.app
/Console — animated hero, URL input, sample targets, breach-flow cards./scanScanner — live OWASP scan: streaming terminal, progress bar, 5-phase attack tracker, per-check status, streaming breach-finding cards with proof + fix steps. Supports?url=your-site.com./checksAttack Modules — all 12 OWASP modules with interactive category/severity filters./reportMethodology — scan pipeline, full OWASP Top-10 coverage table, honest limits.
- Next.js 16 · React 19 · TypeScript
- Tailwind CSS v4 (cyber + alienware theme: glassmorphism, neon, particle network)
- framer-motion (animations & interactive transitions)
npm install
npm run devnpm run build
npm run lint1. TARGET → user pastes a URL they own
2. OWN → ownership verification (meta / file / DNS) — safe & ethical
3. CRAWL → discovers pages, forms, JS, API endpoints
4. PROBE → fires OWASP Top-10 payloads
5. ANALYZE → AI rates severity & impact of each finding
6. REPORT → dashboard shows each leak with live proof
7. FIX → step-by-step plain-language resolution
8. RE-SCAN → re-runs to confirm leaks are closed
This prototype runs a simulated scan engine (deterministic per-URL). A production build plugs a headless-browser + HTTP probe engine + LLM judge into the same UI flow. It only scans sites you own, keeping it ethical and legal.