Skip to content

README.md

Latest commit

 

History

History
102 lines (85 loc) · 4.72 KB

README.md

File metadata and controls

102 lines (85 loc) · 4.72 KB
Raw

API Resource Availability Bot 🤖

A comprehensive Telegram bot for testing web API and resource availability with 21 advanced scanners running in parallel, featuring DNS analysis, protocol detection, paywall detection, security scanning, geolocation, and much more.

✨ Features

🔍 21 Advanced Scanners (All Run in Parallel!)

Core Scanners

  • 🌐 Availability Testing - Check if resources are accessible, measure response time and latency
  • 🔍 DNS Analysis - Resolve DNS records, IPv4/IPv6, nameservers, MX records, DNSSEC
  • 🔒 Protocol Detection - Identify HTTP/HTTPS/FTP protocols, SSL/TLS versions
  • 💰 Paywall Detection - Detect hard/soft paywalls and subscription requirements
  • 🛡️ Security Scanning - Check SSL certificates, security headers, vulnerabilities
  • ☁️ Hosting Provider Detection - Identify hosting providers (AWS, Azure, GCP, Cloudflare, Netlify, Vercel, etc.)
  • 🔌 API Detection - Check if resource provides an API (REST, GraphQL, SOAP, WebSocket)

Performance & SEO

  • ⚡ Performance Checker - Load time, TTFB, resource analysis
  • 📊 SEO Analyzer - Meta tags, sitemap, robots.txt, Open Graph
  • 📱 Mobile Optimization - Responsive design, viewport, mobile-friendliness

Security & Privacy

  • 🔐 Authentication Detector - OAuth, SSO, 2FA, login forms
  • 🍪 Privacy Checker - Cookie compliance, GDPR, privacy policies
  • 🌍 CORS Checker - Cross-origin resource sharing configuration
  • 🔓 Insecure Content Detector - Mixed content, HTTP resources

Advanced Technical Analysis

  • 🛠️ Tech Stack Detector - ENHANCED with deep scanning:

    • CMS detection (WordPress, Drupal, Joomla, Shopify, etc.)
    • Frontend frameworks (React, Vue, Angular, Next.js, Svelte, etc.)
    • Backend frameworks (Laravel, Django, Flask, Rails, etc.)
    • CSS frameworks (Bootstrap, Tailwind, Material-UI, etc.)
    • Build tools (Webpack, Vite, Rollup)
    • Hidden technology detection via JavaScript analysis
    • CDN providers (Cloudflare, Akamai, Fastly)
    • Analytics platforms (GA, GTM, Mixpanel, etc.)
    • Version detection for frameworks

  • 💾 Database Detector - MySQL, PostgreSQL, MongoDB, Redis indicators

  • 💳 Payment Provider Detector - Stripe, PayPal, Square integration

  • 🔄 Redirect Analyzer - NEW!

    • Follows redirect chains (up to 10 hops)
    • Detects HTTP→HTTPS upgrades
    • Identifies www canonicalization
    • Open redirect vulnerability detection
    • Suspicious redirect patterns

  • 🌍 Geolocation & Network - NEW!

    • IP address resolution (IPv4/IPv6)
    • Geolocation (country, region, city, coordinates)
    • ASN information
    • ISP and organization detection
    • Reverse DNS lookup
    • Network type classification (cloud/CDN/standard)
    • MAC address detection capabilities

  • 📺 Advertising Detection - Detect ads, ad networks, tracking pixels

  • 🤖 Bot Protection - CAPTCHA, WAF, rate limiting detection

  • 🤖 MCP Support - Model Context Protocol endpoint detection

🎯 Bot Features

User Interface

  • 📚 Bookmarks - Save and organize your favorite resources
  • 🟢🔴 Real-time Status - Live bot status with uptime tracking
  • 📊 Statistics - Track your scanning history
  • ⚙️ Settings - Customize bot behavior and report formats
  • 📋 History - View scan logs for each resource
  • 🔄 Auto-refresh - Keep bookmark statuses up to date
  • 🎯 Persistent Menu - Quick access to main features

🌐 Telegram Mini App (WebApp)

  • NEW! Web-based scanner interface
  • Beautiful, responsive design
  • Quick-scan popular sites (GitHub, Google, Amazon, Twitter)
  • Real-time statistics display
  • Share results directly in Telegram
  • Native Telegram theme integration

🔒 Security Features

  • Advanced Input Validation - Prevents XSS, injection attacks
  • Rate Limiting - Per-user request limits (10 req/60s)
  • URL Sanitization - Removes dangerous patterns
  • Security Headers - HSTS, CSP, X-Frame-Options
  • Sensitive Data Redaction - API keys, passwords masked in logs

⚡ Performance Optimizations

  • Parallel Scanner Execution - All 21 scanners run simultaneously via asyncio
  • Rate Limiting & Retry Logic - Handles web host restrictions
  • Proxy Support - (Optional) Rotate proxies to bypass limits
  • Exponential Backoff - Smart retry mechanism
  • Request Protection - Built-in flood control

💾 Data Management

  • Telegram Context Storage - Complete user data isolation
  • No Shared Database - Each user's data stored separately in Telegram
  • GDPR Compliant - /cleardata command to delete all user data
  • 100-scan History - Automatic old scan cleanup
  • Persistent Across Restarts - PicklePersistence integration