Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/MayankPandey01/Jira-Lens

Fast and customizable vulnerability scanner For JIRA written in Python
https://github.com/MayankPandey01/Jira-Lens

bugbounty jira jira-rest-api python3 scanner security security-tools vulnerability-scanners

Last synced: 22 days ago
JSON representation

Fast and customizable vulnerability scanner For JIRA written in Python

Awesome Lists containing this project

README

        





Fast and customizable vulnerability scanner For JIRA.









# πŸ€” What is this?

Jira-Lens πŸ” is a Python Based vulnerability Scanner for JIRA.
Jira is a proprietary issue tracking product developed by Atlassian that allows bug tracking and agile project management.
This tool Performs 25+ Checks including CVE's and Multiple Disclosures on the Provided JIRA Instance.

# πŸš€ Usage
Jira-Lens can be easily used from the command line
- Clone this Repo Using ` git clone https://github.com/MayankPandey01/Jira-Lens.git`
- Complete the setup using `python3 setup.py install`
- `python3 Jira-Lens.py -u {URL}`

![render1636911439843](https://user-images.githubusercontent.com/29165227/141692149-7b68504e-410d-43a5-b20e-d8c9963d260d.gif)

Additional Arguments can be passed to use tool in different way:

- `-u` : To Provide a Single URL of JIRA Instance for Testing
- `-f` : Path of File Containing List of URL's of JIRA Instance, properly Formatted and 1 url par Line
- `-o` : To Provide a Custom Output Folder Location [ **default= output/**]
- `-i` : To disable ssl certificate verification

# Docker setup and usage
```console
git clone https://github.com/MayankPandey01/Jira-Lens.git
cd Jira-Lens
docker build . -t jira-lens
docker run -v "$(PWD)/Jira-Lens/output":/app/Jira-Lens/output jira-lens
```

# πŸ”§Installation

## πŸ”¨ Using pip

```console
pip install Jira-Lens
```

## πŸ”¨ Using Git
```console
git clone https://github.com/MayankPandey01/Jira-Lens.git
```
- After Installation process, run the **setup.py** file to set up the tool.

## πŸ§ͺ Recommended Python Version:
- This Tool Only Supports Python 3.
- The recommended version for Python 3 is 3.8.x.

## β›³ Dependencies:

The dependencies can be installed using the requirements file:

Installation on Windows: ![](https://camo.githubusercontent.com/920e3f8eb007a3834e641d27fddb9c102da3fd0c619785b52efb4dabcef2da1c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f776f726b666c6f772f7374617475732f6369706865792f6369706865792f507974686f6e2532306170706c69636174696f6e3f6c6162656c3d57696e646f7773)
- python.exe -m pip3 install -r requirements.txt.

Installation on Linux: ![](https://camo.githubusercontent.com/973cbf24b31b5d10c7f8d4f65fda4c696de8d3bed0923536820f9ac262b8ad08/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f776f726b666c6f772f7374617475732f6369706865792f6369706865792f507974686f6e2532306170706c69636174696f6e3f6c6162656c3d4c696e7578)
- sudo python3 pip3 install -r requirements.txt.

## 🐞 Bug Bounties

This tool is focused mainly on `Bug Bounty Hunters` and `Security Professionals` . You Can Use Jira-Lens to Scan JIRA Instance of the Target Company.

**Why Use This ❓**
- It Provides a Detailed output After the Scan is Completed With all the Findings.
- Take Inputs From File To Scan Multiple Instance
- Fast and Easy to Setup ⚑
- Can Be Added Directly To Your Automation Scripts
- Regularly Updated Scanning Database

## 🎯 Contribution ![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg?style=flat-square)
We Love to Get Contribution from the Open Source CommunityπŸ’™. You are Welcome to Provide your Important Suggestions to make this tool more Awesome. Open a PR and we will See to it ASAP.

**Ways to contribute**
- Suggest a feature
- Adding CVE's and Disclosures Check
- Report a bug
- Fix something and open a pull request
- Create a browser extension
- Help me document the code
- Spread the word

## πŸ“š DISCLAIMER

This project is a [personal development](https://en.wikipedia.org/wiki/Personal_development). Please respect its philosophy and don't use it for evil purposes. By using Jira-Lens, you agree to the MIT license included in the repository. For more details at [The MIT License β€” OpenSource](https://opensource.org/licenses/MIT).

Using Jira-Lens for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.
Happy Hacking ✨✨

## πŸ“ƒ Licensing

This project is licensed under the MIT license.