https://github.com/blackye/lalascan

自主开发的分布式web漏洞扫描框架，集合webkit爬虫，Subdomain子域名发现，sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台
https://github.com/blackye/lalascan

Last synced: 22 days ago
JSON representation

自主开发的分布式web漏洞扫描框架，集合webkit爬虫，Subdomain子域名发现，sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台

• Host: GitHub
• URL: https://github.com/blackye/lalascan
• Owner: blackye
• Created: 2016-08-24T11:22:18.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2016-10-12T01:37:49.000Z (about 8 years ago)
• Last Synced: 2024-08-05T17:40:36.985Z (4 months ago)
• Language: Python
• Homepage: http://www.lalascan.com
• Size: 16.6 MB
• Stars: 172
• Watchers: 12
• Forks: 62
• Open Issues: 3
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - blackye/lalascan - 自主开发的分布式web漏洞扫描框架，集合webkit爬虫，Subdomain子域名发现，sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台 (Python)

README

        
![](https://github.com/blackye/lalascan/blob/master/logo.png)

What's lalascan?

===================================  

Web vulnerability scanner framework

Basic usage

===================================  

```

 _          _

| |    __ _| | __ _ ___  ___ __ _ _ __

| |   / _` | |/ _` / __|/ __/ _` | '_ \

| |__| (_| | | (_| \__ \ (_| (_| | | | |

|_____\__,_|_|\__,_|___/\___\__,_|_| |_|

LalaScan WebApplication vul scanner!

usage:

optional arguments:

  -h, --help            Show help message and exit

  --version             Show program's version number and exit

[ Targets ]:

  -u URL, --url URL     Target URL (e.g. "http://www.lalascan.com/")

  -t PROCESS_NUM, --threads PROCESS_NUM

                        max number of process, default cpu number

[ Resource Found ]:

  -S, --spider          Enable user Spider

[ Plugin Option ]:

  -e PLUGIN, --enable-plugin PLUGIN

                        enable a plugin

[ Request Option ]:

  --data POST DATA      HTTP Post data

  --cookie COOKIE       HTTP Cookie header value

  --referer REFERER     HTTP Referer header value

  --user-agent AGENT    HTTP User-Agent header value

  --random-agent        Use randomly selected HTTP User-Agent header value

  --proxy PROXY         Use a proxy to connect to the target URL

  --timeout TIMEOUT     Seconds to wait before timeout connection (default 30)

  --retry RETRY         Time out retrials times.

```

###正在开发中........