Fast and customizable vulnerability scanner For JIRA written in Python

Last update: Dec 25, 2022

Overview

Fast and customizable vulnerability scanner For JIRA.

🤔 What is this?

Jira-Lens 🔍 is a Python Based vulnerability Scanner for JIRA. Jira is a proprietary issue tracking product developed by Atlassian that allows bug tracking and agile project management. This tool Performs 25+ Checks including CVE's and Multiple Disclosures on the Provided JIRA Instance.

🚀 Usage

Jira-Lens can be easily used from the command line

Clone this Repo Using git clone https://github.com/MayankPandey01/Jira-Lens.git
Complete the setup using python3 setup.py install
python3 Jira-Lens.py -u {URL}

Additional Arguments can be passed to use tool in different way:

-u : To Provide a Single URL of JIRA Instance for Testing
-f : Path of File Containing List of URL's of JIRA Instance, properly Formatted and 1 url par Line
-o : To Provide a Custom Output Folder Location [ default= output/]

🔧 Installation

🔨 Using pip

$ pip install Jira-Lens

🔨 Using Git

git clone https://github.com/MayankPandey01/Jira-Lens.git
After Installation run the setup.py file to set up the tool.

🧪 Recommended Python Version:

This Tool Only Supports Python 3.
The recommended version for Python 3 is 3.8.x.

⛳ Dependencies:

The dependencies can be installed using the requirements file:

Installation on Windows:

python.exe -m pip3 install -r requirements.txt.

Installation on Linux:

sudo python3 pip3 install -r requirements.txt.

🐞 Bug Bounties

This tool is focused mainly on Bug Bounty Hunters and Security Professionals . You Can Use Jira-Lens to Scan JIRA Instance of the Target Company.

Why Use This ❓

It Provides a Detailed output After the Scan is Completed With all the Findings.
Take Inputs From File To Scan Multiple Instance
Fast and Easy to Setup ⚡
Can Be Added Directly To Your Automation Scripts
Regularly Updated Scanning Database

🎯 Contribution

We Love to Get Contribution from the Open Source Community 💙 . You are Welcome to Provide your Important Suggestions to make this tool more Awesome. Open a PR and we will See to it ASAP.

Ways to contribute

Suggest a feature
Adding CVE's and Disclosures Check
Report a bug
Fix something and open a pull request
Create a browser extension
Help me document the code
Spread the word

📚 DISCLAIMER

This project is a personal development. Please respect its philosophy and don't use it for evil purposes. By using Jira-Lens, you agree to the MIT license included in the repository. For more details at The MIT License — OpenSource.

Using Jira-Lens for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Happy Hacking ✨ ✨

📃 Licensing

This project is licensed under the MIT license.

Nmap automated port scanner written in Python

port-scanner Nmap automated port scanner written in Python. USE: Clone the module Import the module: from portscanModule import portscanner Use: ports

1 Dec 3, 2021

Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities

Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities Features 1 Scan one website 2 Scan multiple websites Insta

9 Dec 30, 2022

This python script will automate the testing for the Log4J vulnerability for HTTP and HTTPS connections.

Log4J-Huntress-Automate-Script This python script will automate the testing for the Log4J vulnerability for HTTP and HTTPS connections. Pre-Requisits

1 Dec 16, 2021

open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability

CVE-2021-44228-log4jVulnScanner-metasploit open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability pre

7 Nov 9, 2022

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading The script

187 Jan 3, 2023

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading The script

1 Dec 15, 2021

Comments

Add --cookie option to set cookies during a scan

While performing a penetration test on a Jira instance we used your tool to perform a preliminary scan. Since in our case, we needed a cookie from an SSO login we had to manually edit your code: here's the result. Maybe you want to include it in the official repository.

Good job, thanks for making our job easier :smile:

opened by 5amu 1
add Dockerfile

Hi @MayankPandey01,

Thanks for sharing this tool! I added a Dockerfile to make it easier to install and use. Perhaps others can benefit from this as well.

Cheers, 0xbad53c

opened by 0xbad53c 0
Jira Lens Disabling SSL certificate verification option

The changes I made in "/Jira-Lens/Jira-Lens.py" is focused on adding ssl certificate verification option. With this update, users can use "-i" flag to disable ssl verification check and ssl errors. "-i" flag and explanation also added to main readme file.

opened by Laronax 0

Releases(v1.0.2)

v1.0.2(Nov 15, 2021)

Full Changelog: https://github.com/MayankPandey01/Jira-Lens/commits/v1.0.0
Source code(tar.gz)
Source code(zip)

Fast and customizable vulnerability scanner For JIRA written in Python

Related tags

Overview

Fast and customizable vulnerability scanner For JIRA.

🤔 What is this?

🚀 Usage

🔧 Installation

🔨 Using pip

🔨 Using Git

🧪 Recommended Python Version:

⛳ Dependencies:

🐞 Bug Bounties

🎯 Contribution

📚 DISCLAIMER

📃 Licensing

You might also like...

Nmap automated port scanner written in Python

Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities

This python script will automate the testing for the Log4J vulnerability for HTTP and HTTPS connections.

open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

Python script to tamper with pages to test for Log4J Shell vulnerability.

A simple python script to dump remote files through a local file read or local file inclusion web vulnerability.

😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

Comments

Add --cookie option to set cookies during a scan

add Dockerfile

Jira Lens Disabling SSL certificate verification option

Releases(v1.0.2)

v1.0.2(Nov 15, 2021)

Owner

Mayank Pandey

Sudo Baron Samedit Exploit

Chromepass - Hacking Chrome Saved Passwords

PoC for CVE-2021-45897 aka SCRMBT-#180 - RCE via Email-Templates (Authenticated only) in SuiteCRM <= 8.0.1

Separation of Mainlobes and Sidelobes in the Ultrasound Image Based on the Spatial Covariance (MIST) and Aperture-Domain Spectrum of Received Signals

Profil3r is an OSINT tool that allows you to find potential profiles of a person on social networks, as well as their email addresses 🕵️

Windows Stack Based Auto Buffer Overflow Exploiter

A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts

LinOTP - the open source solution for two factor authentication

Lite version of my Gatekeeper backdoor for public use.

Linus-png.github.io - Versionsverwaltung & Open Source Hausaufgabe

Keystroke logging, often referred to as keylogging or keyboard capturing

The disassembler parses evm bytecode from the command line or from a file.

IPscan - This Script is Framework To automate IP process large scope For Bug Hunting

2021hvv漏洞汇总

This is a simple PoC for the newly found Polkit error names PwnKit

This exploit allows to connect to the remote RemoteMouse 3.008 service to virtually press arbitrary keys and execute code on the machine.

GitHub Advance Security Compliance Action

SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effectively get the assistance they need.

TLaunch: Launch Programs on Multiple Hosts

Nmap scanner with python