Getting Started with EdgeIQ Labs

🔍 XSS Scanner — Find cross-site scripting vulnerabilities

Tests websites for XSS vulnerabilities using 40+ payloads and WAF bypass techniques.

curl -sL https://edgeiqlabs.com/dl/edgeiq-xss-scanner.py -o edgeiq-xss-scanner.py
python3 edgeiq-xss-scanner.py --target "https://example.com/search?q=test"

🌐 Network Scanner — Deep port and service scanning

Scans IP addresses and domains for open ports, running services, and known CVE vulnerabilities.

curl -sL https://edgeiqlabs.com/dl/edgeiq-network-scanner.py -o edgeiq-network-scanner.py
python3 edgeiq-network-scanner.py --target example.com --ports 1-1000

🔒 SSL / Security Headers Checker

Checks SSL certificate expiry, TLS versions, and security HTTP headers.

curl -sL https://edgeiqlabs.com/dl/edgeiq-ssl-checker.py -o edgeiq-ssl-checker.py
python3 edgeiq-ssl-checker.py --domain example.com

🔗 Subdomain Hunter — Find hidden subdomains

Discovers subdomains via public Certificate Transparency logs and checks for takeover risks.

curl -sL https://edgeiqlabs.com/dl/edgeiq-subdomain-hunter.py -o edgeiq-subdomain-hunter.py
python3 edgeiq-subdomain-hunter.py --domain example.com

🕳️ Dark Web Credential Checker

Checks if an email address or domain appears in known data breaches.

curl -sL https://edgeiqlabs.com/dl/edgeiq-credential-checker.py -o edgeiq-credential-checker.py
python3 edgeiq-credential-checker.py --email your@email.com

💉 SQL Injection Scanner Pro — Find SQL injection vulnerabilities in web forms and URLs

Tests websites for SQL injection flaws by injecting safe test payloads into forms, URL parameters, and API endpoints.

curl -sL https://edgeiqlabs.com/dl/edgeiq-sql-injection-scanner.py -o edgeiq-sql-injection-scanner.py
python3 edgeiq-sql-injection-scanner.py --target "https://example.com/product?id=1"

What You Need

• Python 3 — Download from python.org if you don't have it
• A target URL — any website you have permission to test (never scan sites without authorization)
• Internet connection

Step-by-Step Setup

1. Open your terminal (Search "Terminal" on Mac or "cmd" on Windows)
2. Copy the curl command above and paste it into the terminal, then press Enter
3. Wait for the file to download — you'll see a blinking cursor again when it's done
4. Copy the python3 command above, paste it in, and press Enter
5. The scan will start automatically and print results to your screen

How to Run

Run a basic scan by pointing it at a URL with a parameter (like ?id=1):

python3 edgeiq-sql-injection-scanner.py --target "https://example.com/page?id=2"

Scan an entire website by pointing it at a sitemap:

python3 edgeiq-sql-injection-scanner.py --target "https://example.com" --scan-all

Save results to a file:

python3 edgeiq-sql-injection-scanner.py --target "https://example.com" --output report.json

⚠️ Only scan websites you own or have written permission to test. Unauthorized scanning is illegal.

🔐 OAuth Security Checker Pro — Test OAuth 2.0 authentication for vulnerabilities

Checks if OAuth login systems (Google, Facebook logins etc.) are securely configured and resistant to common attacks.

curl -sL https://edgeiqlabs.com/dl/edgeiq-oauth-checker.py -o edgeiq-oauth-checker.py
python3 edgeiq-oauth-checker.py --target "https://example.com/auth/login"

What You Need

• Python 3 — Download from python.org if you don't have it
• OAuth endpoint URL — the login page that uses Google, Facebook, or another OAuth provider
• Internet connection

Step-by-Step Setup

1. Open your terminal
2. Paste the curl command above and press Enter to download the tool
3. Paste the python3 command above, substituting --target with your website's OAuth login URL
4. Results appear directly in your terminal when the scan finishes

How to Run

Test a site's OAuth login flow:

python3 edgeiq-oauth-checker.py --target "https://example.com/oauth/login"

Run a deep check including state token validation:

python3 edgeiq-oauth-checker.py --target "https://example.com/oauth/login" --deep

🔎 API Endpoint Discovery Pro — Find hidden API endpoints and documentation

Discovers undocumented API endpoints, Swagger/UML files, and developer portals that may be accidentally exposed.

curl -sL https://edgeiqlabs.com/dl/edgeiq-api-discovery.py -o edgeiq-api-discovery.py
python3 edgeiq-api-discovery.py --target "https://api.example.com"

What You Need

• Python 3 — Download from python.org if you don't have it
• A domain or API base URL — for example, example.com or api.example.com
• Internet connection

Step-by-Step Setup

1. Open your terminal
2. Paste the curl command and press Enter to download the tool
3. Paste the python3 command, replacing the target with your domain or API URL
4. Press Enter — the tool will scan and list every endpoint it finds

How to Run

Find all endpoints on a domain:

python3 edgeiq-api-discovery.py --target "https://example.com"

Focus on a specific API subdomain:

python3 edgeiq-api-discovery.py --target "https://api.example.com" --deep

🎭 Phishing Kit Detector Pro — Detect phishing kits hosted on your domain

Scans your domain to find phishing pages that impersonate your brand, helping you take them down faster.

curl -sL https://edgeiqlabs.com/dl/edgeiq-phishing-kit-detector.py -o edgeiq-phishing-kit-detector.py
python3 edgeiq-phishing-kit-detector.py --domain example.com

What You Need

• Python 3 — Download from python.org if you don't have it
• Your domain name — for example, yourcompany.com
• Internet connection

Step-by-Step Setup

1. Open your terminal
2. Paste the curl command and press Enter to download the tool
3. Paste the python3 command with your domain substituted in
4. The tool checks public breach records and threat intelligence feeds
5. Results list any phishing kits found targeting your brand

How to Run

Scan your domain for phishing kits:

python3 edgeiq-phishing-kit-detector.py --domain "yourcompany.com"

Get details on each kit found:

python3 edgeiq-phishing-kit-detector.py --domain "yourcompany.com" --verbose

📧 Email Header Analyzer Pro — Analyze email headers for fraud and spoofs

Paste an email's raw headers and the tool checks for SPF, DKIM, DMARC failures, route anomalies, and signs of spoofing.

curl -sL https://edgeiqlabs.com/dl/edgeiq-email-header-analyzer.py -o edgeiq-email-header-analyzer.py
python3 edgeiq-email-header-analyzer.py --headers "Received: from mail.example.com..."

What You Need

• Python 3 — Download from python.org if you don't have it
• Email headers — copy the "raw headers" from an email (in Gmail, click the three dots → Show original; in Outlook, File → Properties → Internet Headers)
• Internet connection

Step-by-Step Setup

1. Open your terminal
2. Paste the curl command and press Enter to download the tool
3. Open your email client and find an email whose headers you want to analyze
4. Copy the full headers (everything above the email body)
5. Paste the python3 command with your headers substituted in (use quotes if the headers span multiple lines)
6. The analysis will print to your terminal

How to Run

Analyze headers from a file:

python3 edgeiq-email-header-analyzer.py --file headers.txt

Check a single email header inline:

python3 edgeiq-email-header-analyzer.py --headers "From: sender@example.com..."

🦠 Malware Signature Scanner Pro — Detect known malware signatures in files

Scans files or URLs against a database of known malware signatures and hash-based threat intelligence.

curl -sL https://edgeiqlabs.com/dl/edgeiq-malware-scanner.py -o edgeiq-malware-scanner.py
python3 edgeiq-malware-scanner.py --file suspicious.exe

What You Need

• Python 3 — Download from python.org if you don't have it
• A file to scan — a program, script, document, or any file you want to check
• Internet connection — needed to check against the threat database

Step-by-Step Setup

1. Open your terminal
2. Paste the curl command and press Enter to download the tool
3. Place the file you want to scan in an easy-to-find location (like your Desktop)
4. Paste the python3 command, replacing suspicious.exe with the path to your file
5. Results appear in your terminal showing whether any matches were found

How to Run

Scan a specific file:

python3 edgeiq-malware-scanner.py --file "/path/to/your/file.exe"

Scan a URL (to check a file before downloading):

python3 edgeiq-malware-scanner.py --url "https://example.com/downloads/software.exe"

Scan an entire folder:

python3 edgeiq-malware-scanner.py --folder "/path/to/downloads"

📋 Lead Researcher Pro — Find business leads and contact info from a domain

Enter a company domain and get back employee names, titles, LinkedIn profiles, and email addresses.

curl -sL https://edgeiqlabs.com/dl/edgeiq-lead-researcher.py -o edgeiq-lead-researcher.py
python3 edgeiq-lead-researcher.py --domain example.com

What You Need

• Python 3 — Download from python.org if you don't have it
• A company domain — for example, acme.com
• Internet connection

Step-by-Step Setup

1. Open your terminal
2. Paste the curl command and press Enter to download the tool
3. Paste the python3 command, substituting your target company's domain
4. The tool queries public data sources and returns a list of contacts

How to Run

Find all leads from a company domain:

python3 edgeiq-lead-researcher.py --domain "acme.com"

Filter to only people with a specific job title:

python3 edgeiq-lead-researcher.py --domain "acme.com" --title "marketing"

Export leads to CSV:

python3 edgeiq-lead-researcher.py --domain "acme.com" --output leads.csv

🏪 Business Listing Aggregator Pro — Build local business lead lists by location

Search for all businesses in a city or zip code — great for local marketing, B2B outreach, and market research.

curl -sL https://edgeiqlabs.com/dl/edgeiq-business-listing.py -o edgeiq-business-listing.py
python3 edgeiq-business-listing.py --city "New York" --state NY

What You Need

• Python 3 — Download from python.org if you don't have it
• A city and state — for example, "Austin" and TX
• Internet connection

Step-by-Step Setup

1. Open your terminal
2. Paste the curl command and press Enter to download the tool
3. Paste the python3 command, substituting your city and state
4. The tool searches business directories and compiles a list

How to Run

Find all businesses in a city:

python3 edgeiq-business-listing.py --city "Austin" --state TX

Filter by business category:

python3 edgeiq-business-listing.py --city "Austin" --state TX --category "restaurants"

Save results to a file:

python3 edgeiq-business-listing.py --city "Austin" --state TX --output austin_businesses.csv

📊 Security Report Generator Pro — Create professional pentest and security audit reports

Combines results from multiple EdgeIQ tools into a polished PDF report with executive summary, technical findings, and remediation steps.

curl -sL https://edgeiqlabs.com/dl/edgeiq-report-generator.py -o edgeiq-report-generator.py
python3 edgeiq-report-generator.py --scan-results ./scan-output/ --output report.pdf

What You Need

• Python 3 — Download from python.org if you don't have it
• Scan results — JSON or text output from other EdgeIQ tools (run a scan first, then feed the results here)
• Internet connection

Step-by-Step Setup

1. Open your terminal
2. Paste the curl command and press Enter to download the tool
3. Run one or more other EdgeIQ tools (like the XSS Scanner or Network Scanner) and save the output
4. Paste the python3 command, pointing to your saved scan results and choosing a filename for the report
5. The PDF report will be created and saved to the location you specified

How to Run

Generate a report from scan results:

python3 edgeiq-report-generator.py --scan-results ./my-scan-results/ --output security-report.pdf

Include your company name and logo:

python3 edgeiq-report-generator.py --scan-results ./my-scan-results/ --company "Acme Corp" --logo ./logo.png --output report.pdf

🔔 Alerting System Pro — Get notified instantly when scans find critical issues

Connects EdgeIQ scan results to Discord, Slack, Telegram, or email so you never miss a critical vulnerability.

curl -sL https://edgeiqlabs.com/dl/edgeiq-alerting-system.py -o edgeiq-alerting-system.py
python3 edgeiq-alerting-system.py --configure --channel discord

What You Need

• Python 3 — Download from python.org if you don't have it
• Webhook URL — from Discord, Slack, or Telegram (instructions below)
• Internet connection

Step-by-Step Setup

1. Open your terminal and download the tool with the curl command above
2. For Discord: Go to your Discord server → Server Settings → Integrations → Webhooks → New Webhook → Copy the URL
3. For Slack: Go to your Slack workspace → Apps → Incoming Webhooks → Add New Webhook → Copy the URL
4. For Telegram: Create a bot via @BotFather, get your bot token and chat ID, then use the Telegram webhook format
5. Run the configure command with your channel choice and paste the webhook URL when prompted

How to Run

Configure Discord alerts:

python3 edgeiq-alerting-system.py --configure --channel discord

Test the alert system:

python3 edgeiq-alerting-system.py --test

Connect to a specific EdgeIQ scan:

python3 edgeiq-xss-scanner.py --target "https://example.com" --alert --config edgeiq-alerting-system.json

🔧 Fix-it Engine — Auto-remediate common security findings

Fix-it takes scan findings and runs approved remediation actions automatically (like SSL renewals, header hardening, and GitHub issue creation) so your team can move from alert to action faster.

curl -sL https://edgeiqlabs.com/dl/edgeiq-fixit-engine.py -o edgeiq-fixit-engine.py
python3 edgeiq-fixit-engine.py --setup

What You Need

• Python 3 — Download from python.org if you don't have it
• At least one EdgeIQ scanner configured — SSL, headers, subdomain, API, etc.
• Optional integrations — Cloudflare API token, GitHub token, or webhook destination
• Internet connection

Step-by-Step Setup

1. Download Fix-it with the curl command above
2. Run python3 edgeiq-fixit-engine.py --setup and choose your remediation modules
3. Set approval mode (manual or auto) and severity thresholds
4. Add credentials for modules you want to enable (Cloudflare, GitHub, Slack/Discord alerts)
5. Run a dry-run against recent findings before enabling live remediation

How to Run

Run a simulation (no live changes):

python3 edgeiq-fixit-engine.py --dry-run --input findings.json

Execute approved remediations:

python3 edgeiq-fixit-engine.py --apply --input findings.json

Schedule automatic runs every hour:

python3 edgeiq-fixit-engine.py --watch --interval 60

📈 Market Watch Bot Pro — Monitor competitor pricing and product changes automatically

Tracks competitor websites and alerts you when prices change, products are added or removed, or landing pages are updated.

curl -sL https://edgeiqlabs.com/dl/edgeiq-market-watch.py -o edgeiq-market-watch.py
python3 edgeiq-market-watch.py --configure

What You Need

• Python 3 — Download from python.org if you don't have it
• Competitor URLs — the pages you want to monitor (product pages, pricing pages)
• Internet connection

Step-by-Step Setup

1. Open your terminal and download the tool
2. Run the configure command to set up your first watch target
3. Enter the competitor URL and your alert preferences
4. The tool will take a snapshot and compare it each time it runs
5. Set up a cron job (see scheduling section) to run the check daily

How to Run

Configure a new competitor watch:

python3 edgeiq-market-watch.py --configure

Manually run a check right now:

python3 edgeiq-market-watch.py --check "https://competitor.com/pricing"

View change history:

python3 edgeiq-market-watch.py --history --domain competitor.com

💰 Competitor Price Intelligence Pro — Track and analyze competitor pricing strategy

Scrapes competitor pricing data across multiple sites, organizes it into a comparison table, and calculates market positioning.

curl -sL https://edgeiqlabs.com/dl/edgeiq-price-intelligence.py -o edgeiq-price-intelligence.py
python3 edgeiq-price-intelligence.py --target "https://competitor.com/pricing"

What You Need

• Python 3 — Download from python.org if you don't have it
• Competitor pricing page URL — a page that lists products and prices
• Internet connection

Step-by-Step Setup

1. Open your terminal and download the tool
2. Point it at a competitor's pricing page URL
3. The tool scrapes all products and prices it finds
4. Results appear in your terminal and can be exported to a file

How to Run

Scrape a competitor's pricing page:

python3 edgeiq-price-intelligence.py --target "https://competitor.com/pricing"

Compare multiple competitors:

python3 edgeiq-price-intelligence.py --targets competitor1.csv competitor2.csv --compare

Export to spreadsheet:

python3 edgeiq-price-intelligence.py --target "https://competitor.com" --output pricing-analysis.csv

🎓 PhishSim Training — phishing awareness training for your team

PhishSim sends realistic phishing test emails to your employees and tracks who clicks, reports, or falls for them — so you know exactly who needs more training.

# Download the PhishSim dashboard installer
curl -sL https://edgeiqlabs.com/dl/edgeiq-phishsim-setup.py -o edgeiq-phishsim-setup.py
python3 edgeiq-phishsim-setup.py --install

What You Need

• Python 3 — Download from python.org if you don't have it
• Email list of your team — a CSV with names and email addresses
• SMTP server or email provider — to send the phishing test emails (Gmail, Outlook, or any SMTP service)
• Internet connection

Step-by-Step Setup (Starter)

1. Download the setup script using the curl command above
2. Prepare your employee list as a CSV file with two columns: name and email
3. Run python3 edgeiq-phishsim-setup.py --install
4. Enter your company name, the SMTP settings for your email provider, and the path to your CSV
5. Choose which phishing template to use (password expiration, package delivery, IT support request)
6. Set the launch date and time for the campaign
7. PhishSim automatically sends the test emails and starts tracking results

How to Run

Launch a phishing campaign from the dashboard:

python3 edgeiq-phishsim-setup.py --launch --campaign "Q2 Security Test"

View campaign results:

python3 edgeiq-phishsim-setup.py --report --campaign "Q2 Security Test"

Add a new phishing template:

python3 edgeiq-phishsim-setup.py --add-template

🖥️ Dashboard Pro & Agency — Central hub for all your EdgeIQ tools and reports

The Dashboard gives you a single place to run all tools, see all results, manage subscriptions, and access reports — no terminal required.

# Download and run the Dashboard
curl -sL https://edgeiqlabs.com/dl/edgeiq-dashboard.py -o edgeiq-dashboard.py
python3 edgeiq-dashboard.py

What You Need

• Python 3 — Download from python.org if you don't have it
• A web browser — Chrome, Firefox, Edge, or Safari
• Internet connection
• Your EdgeIQ Pro license key — sent to you after purchase (check your email)

Step-by-Step Setup

1. Download the Dashboard using the curl command above
2. Run the Dashboard with python3 edgeiq-dashboard.py
3. Open your web browser and go to http://localhost:8050
4. Enter your Pro license key when prompted (found in your purchase confirmation email)
5. The Dashboard will load and you can start running tools from the web interface

How to Run

Start the Dashboard:

python3 edgeiq-dashboard.py

Access from any device on your network (for Pro/Agency multi-seat):

python3 edgeiq-dashboard.py --host 0.0.0.0 --port 8050

Connect your API key for cloud-synced results:

python3 edgeiq-dashboard.py --api-key YOUR_API_KEY_HERE