VAJRA

Offensive Security Platform

A unified, professional-grade penetration testing environment integrating 32+ powerful security tools.

Built by Yash Javiya

---

Overview  •  Quick Shortcuts  •  Platform Highlights  •  Integrated Arsenal  •  Installation
Output Structure  •  Security & Privacy  •  Feedback  •  Support  •  Legal

📋 Overview

VAJRA is a standalone, professional GUI-based offensive security platform designed to streamline the penetration testing workflow. By unifying 32+ industry-standard tools into a single, cohesive graphical interface, it eliminates the need for scattered terminal windows and manual command chaining.

Built for speed, efficiency, and depth, VAJRA empowers security professionals to execute complex audits—from reconnaissance to exploitation—with precision, all from a single binary.

📘 Documentation: For a detailed breakdown of all tools, features, and settings, please read the Official Documentation.

---

⚡ Quick Shortcuts

Action	Shortcut	Description
Command Palette	Ctrl+K	Find any tool or action instantly
Terminal Drawer	Ctrl+``	Toggle the built-in shell
Run Tool	Ctrl+R	Execute the active tool
Stop Tool	Ctrl+Q	Terminate the current process
Clear Output	Ctrl+L	Clear the active output panel
Focus Input	Ctrl+I	Jump focus to the primary target field
Save Session	Ctrl+S	Save the current workspace state
Load Session	Ctrl+O	Load a saved workspace

---

🌟 Platform Highlights

🎨 Modern UI/UX

• Dynamic Theming: Switch between GitHub Dark, GitHub Light, One Dark, and Industrial Orange themes instantly — every element updates live.
• Mission Control Dashboard: Monitor system performance (CPU/RAM gauges), Active Processes, and Local IP Address at a glance.
• Welcome Experience: A clean landing page shown on freshly opened sessions.
• Command Palette (Ctrl+K): A Spotlight-style search interface for instant navigation to any tool, theme, or action.
• Integrated Terminal (Ctrl+`` ): A full-featured terminal drawer with command history and live streaming output.
• Session Management: Save your entire pentest state and resume exactly where you left off.
• Tab System: Each tool opens in its own moveable, closeable tab — run multiple tools in parallel.
• Collapsible Sidebar: Category-grouped tool navigation, toggleable to maximize screen space.

🛠️ Core Capabilities

• Integrated Arsenal: 32+ specialized security tools categorized for efficient workflow.
• Automated Pipeline: A "Fire & Forget" bug bounty workflow that chains recon → scanning → vulnerability detection.
• Real-time Streaming: Watch tool output live as it is produced.
• Smart Installer: Auto-detects and installs missing external dependencies.
• Organized Output: Every scan auto-creates timestamped Logs/, Reports/, and JSON/ folders under ~/Vajra-results/.
• Command Preview: Every tool shows the exact CLI command it will run — fully transparent.

🎯 Who is this tool for?

• Penetration Testers: Simplify complex workflows and manage assessments in one place.
• Bug Bounty Hunters: Automate reconnaissance and discovery to find low-hanging fruit faster.
• Red Teamers: Maintain a persistent, organized workspace during engagements.
• Security Researchers: Experiment with tools and analyze output in a unified environment.

---

🛠️ Integrated Arsenal

🤖 Automation

Tool	Description
Automation	End-to-end recon & audit pipeline (Whois → Subdomains → Live Hosts → Nmap → Nuclei → Report)

📡 Info Gathering

Tool	Description
Whois	Domain registry & registrar lookup
Dig	Advanced DNS record enumeration (A, MX, NS, TXT, SOA)
DNSRecon	DNS zone transfers, record analysis & wildcard detection
WAFW00F	WAF detection and fingerprinting (Cloudflare, Akamai, Imperva…)
SearchSploit	Offline Exploit-DB archive search

🌐 Subdomain Enumeration

Tool	Description
Subfinder	Passive subdomain discovery via 40+ online sources
Amass	In-depth attack surface mapping (active + passive)
theHarvester	OSINT — emails, subdomains, hosts from multiple public sources
Sublist3r	Search engine-based subdomain enumeration
Chaos	ProjectDiscovery internet-wide dataset integration

🟢 Live Subdomains

Tool	Description
Httpx	Fast multi-purpose HTTP probing of live hosts

🔍 Port Scanning

Tool	Description
Nmap	Industry-standard network mapper (SYN/TCP/UDP/ACK scans, NSE scripts)
Port Scanner	Custom async multi-threaded TCP scanner with stealth mode & banner grabbing

📸 Web Screenshots

Tool	Description
Eyewitness	Automated web screenshots for large host lists

🕸️ Web Scanning

Tool	Description
FFUF	Fast web fuzzer for directory, file, and parameter discovery
Gobuster	Directory, DNS, and virtual host brute-forcing

💉 Web Injection

Tool	Description
SQLi Hunter	Native Python SQL Injection engine (error-based & boolean-blind)
Web Fuzzer	High-performance payload-based endpoint and parameter fuzzer
API Tester	REST & GraphQL endpoint security auditing
Crawler	Web application spidering and site-map builder

🔓 Vulnerability Scanner

Tool	Description
Nuclei	Template-based CVE and misconfiguration scanner
Nikto	Comprehensive web server vulnerability scanner

🔐 Cracker

Tool	Description
Hashcat	GPU-accelerated password recovery with rule and mask attacks
John	CPU-based password auditor (100+ hash formats)
Hydra	Parallelized network login cracker (SSH, FTP, HTTP, SMB…)
Hash Finder	Heuristic hash-type identifier (200+ algorithm signatures)
Dencoder	Universal encoder/decoder (Base64, Hex, URL, ROT13, JWT…)

🚀 Payload Generator

Tool	Description
MSFVenom	Metasploit payload builder with encoder and template injection support
ShellForge	100+ reverse/bind shell one-liners with listener auto-generation

📄 File Analysis

Tool	Description
Strings	Binary printable-text extractor

🔎 OSINT

Tool	Description
HTTrack	Full website mirroring and offline browsing

---

🚀 Installation & Setup

1. Download & Run

VAJRA is distributed as a portable binary.

1. Download the vajra binary.
2. Make Executable:

   chmod +x vajra

3. Launch:

   ./vajra

   Note: Raw-socket scans (e.g., Nmap SYN) require root privileges:

   sudo ./vajra

2. Install External Tools

1. Launch VAJRA.
2. Go to Settings (⚙️) → Tool Installer.
3. Click "Check Dependencies".
4. The built-in manager detects your OS (Debian/Arch/Fedora) and installs missing tools automatically.

---

📖 Output Structure

All scan results are automatically organized by target and session:

~/Vajra-results/
└── example.com_01032026_191500/
    ├── Logs/              # Raw tool logs (nmap.xml, nuclei.txt, whois.txt…)
    ├── JSON/              # Consolidated findings (final.json)
    ├── Reports/           # Generated HTML reports
    └── Screenshots/       # EyeWitness captures

For file-input scans (multiple targets): ~/Vajra-results/<group>/<target>_<timestamp>/

---

🛡️ Security & Privacy

• Local Execution: VAJRA runs entirely on your local machine. No data is sent to the cloud.
• Root Privileges: Only specific subprocesses (e.g., Nmap SYN scans) require elevated privileges when needed.
• Process Supervision: Child processes use PR_SET_PDEATHSIG — if VAJRA closes, all spawned processes terminate automatically.

---

💡 Feature Requests & Feedback

• Feature Requests: Open an Issue with the "Enhancement" label.
• Bug Reports: Open an Issue with the "Bug" label.

❤️ Support the Project

• ⭐ Star the repository on GitHub.
• 🍴 Fork the repository to your profile.
• 🗣️ Share it with your network and fellow security professionals.
• ☕ Tip the Developer: Buy me a Coffee on Ko-fi!

---

⚠️ Legal Disclaimer

VAJRA is a proprietary tool designed for authorized security testing ONLY.

By downloading and using this software, you agree that:

• ✅ You will use it only on systems you own or have explicit written permission to test.
• ✅ You will comply with all applicable local, state, and federal laws.
• ❌ The developers assume NO LIABILITY for misuse or damage caused by this software.
• ❌ Reverse engineering, decompilation, or unauthorized redistribution of this binary is strictly prohibited.

Unauthorized access to computer systems is illegal.

---

Built for security professionals, by Yash Javiya

VAJRA v1.0