yxanul is a powerful, all-in-one web scanning toolkit designed to streamline reconnaissance and vulnerability assessment. Built with Go, it integrates cutting-edge tools for WAF detection, crawling, and scanning, making it a must-have for penetration testers, bug bounty hunters, and security enthusiasts.
- π WAF Detection: Automatically detect Web Application Firewalls (WAFs) using
wafw00f
. - πΈοΈ Intelligent Crawling: Traverse JavaScript-heavy websites and extract actionable URLs with
Katana
. - π Live Host Probing: Validate and filter live URLs using
HTTPX
. - π‘οΈ Vulnerability Scanning: Unleash the power of
Nuclei
with template-based vulnerability detection. - βοΈ Flexible Modes: Choose between aggressive and standard scanning modes based on your needs.
Ensure the following tools are installed on your system:
-
Clone the repository:
git clone https://github.com/yxanul/yxanul.git cd yxanul
-
Build the binary:
go build -o yxanul
-
Verify the binary is ready:
./yxanul -h
Run yxanul with the following options:
./yxanul -url <target-url>
For faster scans:
./yxanul -url <target-url> -a
- Step 1: Detects WAF presence on the target website using
wafw00f
. - Step 2: Crawls the site using
Katana
, extracting JavaScript-heavy links, sitemaps, and robots.txt. - Step 3: Probes discovered URLs using
HTTPX
to identify live hosts. - Step 4: Scans live URLs for vulnerabilities with
Nuclei
, leveraging its powerful template engine.
Customize the behavior of yxanul by modifying the integrated tool configurations:
- Adjust crawling depth, concurrency, or rate-limiting in
Katana
. - Tune
Nuclei
to load custom templates with-nt
or-as
for specific scans.
Scanning the OWASP Juice Shop:
./yxanul -url https://juice-shop.herokuapp.com -a
Sample output:
WAF Detected: No WAF detected
Running Katana for crawling...
Running HTTPX to probe URLs...
Running Nuclei on probed URLs...
Scan completed successfully!
Contributions are welcome! If you find a bug or have an idea for improvement:
- Fork the repository.
- Create a new branch (
feature/my-feature
). - Commit your changes.
- Push the branch and create a pull request.
This project is licensed under the MIT License. See the LICENSE file for details.
- Thanks to Project Discovery for their incredible tools.
- Built with β€οΈ by yxanul.
If you enjoy using yxanul, feel free to β the repo and share it with the community!
Let me know if youβd like to modify anything further! π
- π¬ Ask me about ...
- π« How to reach me: ...
- π Pronouns: ...
- β‘ Fun fact: ... -->