Vajra is an automated framework attacks and penetration testing. It has highly customizable scanning capability based on target range. Instead of performing the entire scan on the target, it performs only those scans that you have selected, which will minimize unnecessary movement and stores the results in CouchDB.
Uses common open source tools that each Bug Hunter executes during its tests on a target. It performs the scanning process through the browser with a very simple user interface, which makes it very beginner friendly.
Basic features
- Targeted special scan
- Perform multiple scans simultaneously
- Extremely customizable scan based on each user's requirements
- Friendly Web UI for beginners users
- Extremely fast
- Export result to CSV or copy directly to clipboard
additional characteristics
- Subdomain Scan with IP, Status Code and Title.
- Subdomain Takeover Scan
- Port Scan
- Endpoint Discovery
- Endpoints with Parameter Discovery
- 24/7 Monitor Subdomains
- 24/7 JavaScript Monitor
- Templates Scan using Nuclei
- Fuzz endpoints to find hidden endpoints or critical files (eg .env)
- Extract JavaScripts
- Fuzz with Custom Generated wordlist
- Extracts Secrets (eg api keys, hidden javascripts endpoints)
- Checks for Broken Links
- Filter Endpoints based on extensions
- Favicon Hash
- Github Dorks
- CORS Scan
- CRLF Scan
- 403 Bypasser
- Find Hidden Parameters
- google-hacking
- Shodan Search Queries
- Extract Hidden Endpoints from JavaScript
- Create target based Custom Wordlist
- Vulnerability Scan
- CVE Scan
- CouchDB to store all scan output
Installation
Information about installing the program, you will find here.
Application snapshots
Video guide
https://www.youtube.com/watch?v=WLurj5Lg8cI
You can download the program from here.
