nannal/jaeles repository overview

Jaeles is a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner.

⁠Installation

go get -u github.com/jaeles-project/jaeles

Please visit the Official Documention⁠ for more details.

Checkout Signature Repo⁠ for base signature.

⁠Usage

More usage here⁠

Example commands.

jaeles scan -u http://example.com

jaeles scan -s signatures/common/phpdebug.yaml -U /tmp/list_of_urls.txt

jaeles scan --retry 3 --verbose -s "signatures/cves/jira-*" -U /tmp/list_of_urls.txt
jaeles scan --retry 3 --verbose -s "signatures/fuzz/.*" -U /tmp/list_of_urls.txt

jaeles --verbose server -s sqli

⁠Showcases

More showcase here⁠

Detect Jira SSRF CVE-2019-8451

⁠Burp Integration

Plugin can be found here⁠ and Video Guide here⁠

⁠Planned Features

• Adding more signatures.
• Adding more input sources.
• Adding more APIs to get access to more properties of the request.
• Adding proxy plugins to directly receive input from browser of http client.
• Adding passive signature for passive checking each request.
• Adding more action on Web UI.
• Integrate with many other tools.

⁠Contribute

If you have some new idea about this project, issue, feedback or found some valuable tool feel free to open an issue for just DM me via @j3ssiejjj. Feel free to submit new signature to this repo⁠.

⁠Credits

• Special thanks to chaitin⁠ team for sharing ideas to me for build the architecture.

• React components is powered by Carbon⁠ and carbon-tutorial⁠.

• Awesomes artworks are powered by Freepik⁠ at flaticon.com⁠.

⁠Mentions

My introduction slide about Jaeles⁠

⁠In distributions

⁠Contributors

⁠Code Contributors

This project exists thanks to all the people who contribute. [Contribute⁠].

⁠Financial Contributors

Become a financial contributor and help us sustain our community. [Contribute⁠]

⁠Individuals

⁠Organizations

Support this project with your organization. Your logo will show up here with a link to your website. [Contribute⁠]

⁠License

Jaeles is made with ♥ by @j3ssiejjj⁠ and it is released under the MIT license.