Result of Scan
Found Subdomains
Subdomain Monitoring
Installation
All the installation instructions are available at wiki page. Find the wiki documentation here: https://github.com/r3curs1v3-pr0xy/vajra/wiki/Installation
Tools used by Vajra
All the tools used by Vajra are listed here: Link (https://github.com/r3curs1v3-pr0xy/vajra/blob/main/CREDITS.md)
Credits
Please take a look at CREDITS.md (https://github.com/r3curs1v3-pr0xy/vajra/blob/main/CREDITS.md)
Disclaimer
Most of these tools have been developed by the authors of the tool that has been listed in CREDITS.md (https://github.com/r3curs1v3-pr0xy/vajra/blob/main/CREDITS.md). I just put all the pieces together, plus some extra magic. This tool is for educational purposes only. You are responsible for your own actions. If you mess something up or break any laws while using this software, it's your fault, and your fault only.
FAQ
What is the accuracy of this framework?
=> Vajra uses only open source tools and scripts so its accuracy depends upon those tools.
What is scalability of this framework?
=> It depends upon the resources you provide to run it.
Does it gives immediate result?
-=> Although Vajra uses asynchronous methods but still it takes some time to complete all the scan. You can see your running scans through ongoing scan tab
Download Vajra (https://github.com/r3curs1v3-pr0xy/vajra)
All the installation instructions are available at wiki page. Find the wiki documentation here: https://github.com/r3curs1v3-pr0xy/vajra/wiki/Installation
Tools used by Vajra
All the tools used by Vajra are listed here: Link (https://github.com/r3curs1v3-pr0xy/vajra/blob/main/CREDITS.md)
Credits
Please take a look at CREDITS.md (https://github.com/r3curs1v3-pr0xy/vajra/blob/main/CREDITS.md)
Disclaimer
Most of these tools have been developed by the authors of the tool that has been listed in CREDITS.md (https://github.com/r3curs1v3-pr0xy/vajra/blob/main/CREDITS.md). I just put all the pieces together, plus some extra magic. This tool is for educational purposes only. You are responsible for your own actions. If you mess something up or break any laws while using this software, it's your fault, and your fault only.
FAQ
What is the accuracy of this framework?
=> Vajra uses only open source tools and scripts so its accuracy depends upon those tools.
What is scalability of this framework?
=> It depends upon the resources you provide to run it.
Does it gives immediate result?
-=> Although Vajra uses asynchronous methods but still it takes some time to complete all the scan. You can see your running scans through ongoing scan tab
Download Vajra (https://github.com/r3curs1v3-pr0xy/vajra)
Subcert - An Subdomain Enumeration Tool, That Finds All The Subdomains From Certificate Transparency Logs
Subcert is a subdomain enumeration tool, that finds all the valid subdomains from certificate transparency logs. Setup Step 1: Install Python 3 apt-get install python3-pip Step 2: Clone the Repository git clone https://github.com/A3h1nt/Subcert.git Step 3: Install Dependencies pip3 install -r requirements.txt Step 4: Move the Directory to /opt mv subcert /opt/ Step 5: Add an alias in .bashrc to run the script from anywhere alias subcert="python3 /opt/subcert/subcert.py" Demo Contribute Improve Code Suggestions Report Bugs Contact Me You can contact me regarding anything at A3h1nt Download Subcert
Read more...
Subcert is a subdomain enumeration tool, that finds all the valid subdomains from certificate transparency logs. Setup Step 1: Install Python 3 apt-get install python3-pip Step 2: Clone the Repository git clone https://github.com/A3h1nt/Subcert.git Step 3: Install Dependencies pip3 install -r requirements.txt Step 4: Move the Directory to /opt mv subcert /opt/ Step 5: Add an alias in .bashrc to run the script from anywhere alias subcert="python3 /opt/subcert/subcert.py" Demo Contribute Improve Code Suggestions Report Bugs Contact Me You can contact me regarding anything at A3h1nt Download Subcert
Read more...
GitHub
GitHub - A3h1nt/Subcert: Subcert is a subdomain enumeration tool, that finds all the subdomains from certificate transparency logs.
Subcert is a subdomain enumeration tool, that finds all the subdomains from certificate transparency logs. - GitHub - A3h1nt/Subcert: Subcert is a subdomain enumeration tool, that finds all the su...
Vajra - A Highly Customi zable Target And Scope Based Automated Web Hacking Framework To Automate Boring Recon Tasks
An automated web hacking framework for web applications Detailed insight about Vajra can be found at https://hackwithproxy.medium.com/introducing-vajra-an-advanced-web-hacking-framework-bd8307a01aa8 About Vajra Vajra is an automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing. Vajra has highly customizable target scope based scan feature. Instead of running all the scan on target, it runs only those scan selected by you which will minimize unnecessary traffic and stores output in one place at CouchDB. Vajra uses most common open source tools which every Bug Hunter runs during their testing on target. It does all the stuffs through web browser with very simple UI that makes it absolute beginner friendly framework. Analyzing your data from scan result is very important in Bug Bounty. The chances of missing anything is less only if you could visualize your data in proper way and Vajra does so with a lot of filters. I created this project for my personal use (about 6 months ago) but looking at its usefulness, I decided to make it open-source so that it can save your time and can get some more improvement from community. Currently, I added only 27 unique bug bounty feature to it but more will be added in near future. Visit this URL for Demo: https://hackwithproxy.tech/login None of the scan will work in demo website. Username: root password: toor Demo Key Features Highly target specific scan Run multiple scans in parallel Highly customizable scan based on user requirements Absolute beginner friendly Web UI Fast (as it is Asynchronous) Export result in CSV or directly copy to clipboard Telegram Notification What Vajra does Subdomain Scan with IP, Status Code and Title. Subdomain Takeover Scan Port Scan Endpoints Discovery Endpoints with Parameter Discovery 24/7 Monitor Subdomains 24/7 Monitor JavaScript Templates Scan using Nuclei Fuzz endpoints to find hidden endpoints or critical files (e.g .env) Extract JavaScripts Fuzz with Custom Generated wordlist Extracts Secrets (e.g api keys, hidden javascripts endpoints) Checks for Broken Links Filter Endpoints based on extensions Favicon Hash Github Dorks CORS Scan CRLF Scan 403 Bypasser Find Hidden Parameters Google Hacking Shodan Search Queries Extract Hidden Endpoints from JavaScript Create target based Custom Wordlist Vulnerability Scan CVE Scan CouchDB to store all scan output Total ScansResult of ScanFound Subdomains Subdomain MonitoringInstallation All the installation instructions are available at wiki page. Find the wiki documentation here: https://github.com/r3curs1v3-pr0xy/vajra/wiki/Installation Tools used by Vajra All the tools used by Vajra are listed here: Link Credits Please take a look at CREDITS.md Disclaimer Most of these tools have been developed by the authors of the tool that has been listed in CREDITS.md. I just put all the pieces together, plus some extra magic. This tool is for educational purposes only. You are responsible for your own actions. If you mess something up or break any laws while using this software, it's your fault, and your fault only. FAQ What is the accuracy of this framework? => Vajra uses only open source tools and scripts so its accuracy depends upon those tools. What is scalability of this framework? => It depends upon the resources you provide to run it. Does it gives immediate result? -=> Although Vajra uses asynchronous methods but still it takes some time to complete all the scan. You can see your running scans through ongoing scan tab Download Vajra
Read more...
An automated web hacking framework for web applications Detailed insight about Vajra can be found at https://hackwithproxy.medium.com/introducing-vajra-an-advanced-web-hacking-framework-bd8307a01aa8 About Vajra Vajra is an automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing. Vajra has highly customizable target scope based scan feature. Instead of running all the scan on target, it runs only those scan selected by you which will minimize unnecessary traffic and stores output in one place at CouchDB. Vajra uses most common open source tools which every Bug Hunter runs during their testing on target. It does all the stuffs through web browser with very simple UI that makes it absolute beginner friendly framework. Analyzing your data from scan result is very important in Bug Bounty. The chances of missing anything is less only if you could visualize your data in proper way and Vajra does so with a lot of filters. I created this project for my personal use (about 6 months ago) but looking at its usefulness, I decided to make it open-source so that it can save your time and can get some more improvement from community. Currently, I added only 27 unique bug bounty feature to it but more will be added in near future. Visit this URL for Demo: https://hackwithproxy.tech/login None of the scan will work in demo website. Username: root password: toor Demo Key Features Highly target specific scan Run multiple scans in parallel Highly customizable scan based on user requirements Absolute beginner friendly Web UI Fast (as it is Asynchronous) Export result in CSV or directly copy to clipboard Telegram Notification What Vajra does Subdomain Scan with IP, Status Code and Title. Subdomain Takeover Scan Port Scan Endpoints Discovery Endpoints with Parameter Discovery 24/7 Monitor Subdomains 24/7 Monitor JavaScript Templates Scan using Nuclei Fuzz endpoints to find hidden endpoints or critical files (e.g .env) Extract JavaScripts Fuzz with Custom Generated wordlist Extracts Secrets (e.g api keys, hidden javascripts endpoints) Checks for Broken Links Filter Endpoints based on extensions Favicon Hash Github Dorks CORS Scan CRLF Scan 403 Bypasser Find Hidden Parameters Google Hacking Shodan Search Queries Extract Hidden Endpoints from JavaScript Create target based Custom Wordlist Vulnerability Scan CVE Scan CouchDB to store all scan output Total ScansResult of ScanFound Subdomains Subdomain MonitoringInstallation All the installation instructions are available at wiki page. Find the wiki documentation here: https://github.com/r3curs1v3-pr0xy/vajra/wiki/Installation Tools used by Vajra All the tools used by Vajra are listed here: Link Credits Please take a look at CREDITS.md Disclaimer Most of these tools have been developed by the authors of the tool that has been listed in CREDITS.md. I just put all the pieces together, plus some extra magic. This tool is for educational purposes only. You are responsible for your own actions. If you mess something up or break any laws while using this software, it's your fault, and your fault only. FAQ What is the accuracy of this framework? => Vajra uses only open source tools and scripts so its accuracy depends upon those tools. What is scalability of this framework? => It depends upon the resources you provide to run it. Does it gives immediate result? -=> Although Vajra uses asynchronous methods but still it takes some time to complete all the scan. You can see your running scans through ongoing scan tab Download Vajra
Read more...
Medium
Introducing Vajra β an advanced web hacking framework
A highly customizable automated web hacking framework for bug bounty and penetration testing to automate boring recon tasks and same scans.
Automation of the reconnaissance phase during Web Application Penetration Testing II
https://karol-mazurek95.medium.com/automation-of-the-reconnaissance-phase-during-web-application-penetration-testing-ii-4336bd4ca73b?source=rss------bug_bounty-5
https://karol-mazurek95.medium.com/automation-of-the-reconnaissance-phase-during-web-application-penetration-testing-ii-4336bd4ca73b?source=rss------bug_bounty-5
This article is a continuation of the previous one available at my Medium blog. This time was described reconnaissance of the oneβ¦Continue reading on Medium Β» (https://karol-mazurek95.medium.com/automation-of-the-reconnaissance-phase-during-web-application-penetration-testing-ii-4336bd4ca73b?source=rss------bug_bounty-5)
Anahtar Tarih Mi Oluyor?βββ21 Mart 2021
https://bulent-muslu.medium.com/anahtar-tarih-mi-oluyor-21-mart-2021-a2a97d9b05b9?source=rss------bug_bounty-5
https://bulent-muslu.medium.com/anahtar-tarih-mi-oluyor-21-mart-2021-a2a97d9b05b9?source=rss------bug_bounty-5
Bu haftanΔ±n Γ§ok konuΕulan Siber GΓΌvenlik haberlerini ve geliΕmelerini sizler iΓ§in derledim. -43-Continue reading on Medium Β» (https://bulent-muslu.medium.com/anahtar-tarih-mi-oluyor-21-mart-2021-a2a97d9b05b9?source=rss------bug_bounty-5)
How I Found My First Critical Vulnerability In Bug Bounties
https://thexssrat.medium.com/how-i-found-my-first-critical-vulnerability-in-bug-bounties-f890d420764b?source=rss------bug_bounty-5
https://thexssrat.medium.com/how-i-found-my-first-critical-vulnerability-in-bug-bounties-f890d420764b?source=rss------bug_bounty-5
Hello amazing hacker and welcome! I hope you are doing well. Please sit back and relax, uncle rat is going to tell you the story of how heβ¦Continue reading on Medium Β» (https://thexssrat.medium.com/how-i-found-my-first-critical-vulnerability-in-bug-bounties-f890d420764b?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Automation of the reconnaissance phase during Web Application Penetration Testing II
https://cdn-images-1.medium.com/max/795/1*HNWtOFSX8aFQvsd4strazQ.png
This article is a continuation of the previous one available at my Medium blog. This time was described reconnaissance of the oneβ¦
Continue reading on Medium Β»
Automation of the reconnaissance phase during Web Application Penetration Testing II
https://cdn-images-1.medium.com/max/795/1*HNWtOFSX8aFQvsd4strazQ.png
This article is a continuation of the previous one available at my Medium blog. This time was described reconnaissance of the oneβ¦
Continue reading on Medium Β»