jaeles

The Swiss Army knife for automated Web Application Testing

Name:jaeles

Category:Scanners

Publisher:trickest-mhmdiaa

Created:1/24/2024

Container:quay.io/trickest/jaeles:v0.17.1

Output Type:

License:Unknown

Source:View Source

Parameters

raw · file

--rawRaw request from Burp for origin

url · string · required

--urlURL of target

html · boolean

--htmlGenerate HTML report after the scan done

json · boolean

--jsonStore output as JSON

urls · file · required

--urlsURLs file of target

chunk · boolean

--chunkEnable chunk running against big input

debug · boolean

--debugDebug

delay · string

--delayDelay time between requests

found · string

--foundRun host OS command when vulnerable found

level · string

--levelFilter signature by level (default 1)

local · boolean

--localEnable local analyze (Accept input as local path)

no-db · boolean

--no-dbDisable Database

proxy · string

--proxyproxy

quiet · boolean

--quietQuiet Output

retry · string

--retryHTTP Retry

title · string

--titleReport title name

config · file

--configconfig file (default is $HOME/.jaeles/config.yaml)

inline · string

--inlineInline Detections

params · string

--paramsCustom params -p='foo=bar' (Multiple -p flags are accepted)

report · string

--reportReport name

scanID · string

--scanIDScan ID

single · boolean

--singleDisable parallel mode (use this when you need logic in single signature

exclude · string

--excludeExclude Signature selector (Multiple flags are accepted)

headers · string

--headersCustom headers (e.g: -H 'Referer: {{.BaseURL}}') (Multiple flags are accepted)

passive · boolean

--passiveTurn on passive detections

refresh · string

--refreshRefresh time for background task (default 10)

rootDir · folder

--rootDirroot Project (default ~/.jaeles/)

signDir · folder

--signDirFolder contain default signatures (default ~/.jaeles/base-signatures/)

threads · string

--threadsSet the concurrency level inside single signature (default 10)

timeout · string

--timeoutHTTP timeout (default 20)

verbose · boolean

--verboseVerbose output

base-url · boolean

--baShortcut for take raw input as {{.BaseURL}}'

save-raw · boolean

--save-rawsave raw request

chunk-dir · string

--chunk-dirTemp Directory to store chunk directory

no-output · boolean

--no-outputDo not store output

chunk-size · string

--chunk-sizeChunk Size (default 20000)

signatures · string

--signsSignature selector (Multiple -s flags are accepted)

always-true · boolean

--atEnable Always True Detection for observe response

chunk-limit · string

--chunk-limitLimit size to trigger chunk run (default 200000)

concurrency · string

--concurrencySet the concurrency level (default 20)

local-proxy · boolean

--lcShortcut for '--proxy http://127.0.0.1:8080'

quietFormat · string

--quietFormatFormat for quiet output (default {{.VulnURL}})

format-input · boolean

--format-inputEnable special input format

selectorFile · file

--selectorFileSignature selector from file

chunk-threads · string

--chunk-threadsNumber of Chunk Threads (default 2)

no-background · boolean

--no-backgroundDo not run background task (default true)

store-verbose · boolean

--sverboseStore verbose info in summary file

filtering-mode · boolean

--fiEnable filtering mode (to use Diff() detection)

passive-selector · string

--spSelector for passive detections (default *)

disable-replicate-request · boolean

--drShortcut for disable replicate request (avoid sending many request to timeout)