jaeles

> [!IMPORTANT] > **This repository has been archived and is no longer maintained.** > > Check out **[github.com/vigolium/vigolium](https://github.com/vigolium/vigolium)** — a brand new scanner that I made that's better in every way. **Jaeles** is a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner. ## Installation Download [precompiled version here](https://github.com/jaeles-project/jaeles/releases). If you have a Go environment, make sure you have **Go >= 1.17** with Go Modules enable and run the following command. ```shell go install github.com/jaeles-project/jaeles@latest ``` Please visit the [Official Documention](https://jaeles-project.github.io/) for more details. ### **Note**: Checkout [Signatures Repo](https://github.com/jaeles-project/jaeles-signatures) for install signature. ## Usage ``` … ``` More usage can be found [here](https://jaeles-project.github.io/usage/) ## Run with Docker ```shell docker pull j3ssie/jaeles docker run j3ssie/jaeles scan -s '' -u http://example.com ``` ## Showcases | [](https://asciinema.org/a/392827) [**Jenkins Gitlab XSS CVE-2020-2096**](https://asciinema.org/a/392827) | [](https://asciinema.org/a/392822) [**Grafana DoS Probing CVE-2020-13379**](https://asciinema.org/a/392822) | |:----------:|:-------------:| | [](https://asciinema.org/a/392824) [**SolarWindsOrion LFI CVE-2020-10148**](https://asciinema.org/a/392824) | [](https://asciinema.org/a/392821) [**Nginx Vhost XSS**](https://asciinema.org/a/392821) |

More showcase can be found here

*** ### HTML Report summary ### Burp Integration Plugin can be found [here](https://github.com/jaeles-project/jaeles-plugins/blob/master/jaeles-burp.py) and Video Guide [here](https://youtu.be/1lxsYhfTq3M) ## Mentions [My introduction slide about Jaeles](https://speakerdeck.com/j3ssie/jaeles-the-swiss-army-knife-for-automated-web-application-testing) ### Planned Features * Adding more signatures. * Adding more input sources. * Adding more APIs to get access to more properties of the request. * Adding proxy plugins to directly receive input from browser of http client. * Adding more action on Web UI. * Integrate with many other tools. ## Painless integrate Jaeles into your recon workflow?

This project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine

## Contribute If you have some new idea about this project, issue, feedback or found some valuable tool feel free to open an issue for just DM me via @j3ssiejjj. Feel free to submit new signature to this [repo](https://github.com/jaeles-project/jaeles-signatures). ### Credits * Special thanks to [chaitin](https://github.com/chaitin/xray) team for sharing ideas to me for build the architecture. * React components is powered by [Carbon](https://www.carbondesignsystem.com/) and [carbon-tutorial](https://github.com/carbon-design-system/carbon-tutorial). * Awesomes artworks are powered by [Freepik](http://freepik.com) at [flaticon.com](http://flaticon.com). ## In distributions ## Contributors ### Code Contributors This project exists thanks to all the people who contribute. [[Contribute](CONTRIBUTING.md)]. ### Financial Contributors Become a financial contributor and help us sustain our community. [[Contribute](https://opencollective.com/jaeles-project/contribute)] #### Individuals #### Organizations Support this project with your organization. Your logo will show up here with a link to your website. [[Contribute](https://opencollective.com/jaeles-project/contribute)] ## License `Jaeles` is made with ♥ by [@j3ssiejjj](https://twitter.com/j3ssiejjj) and it is released under the MIT license. ## Donation