Python CLI • Security • Non‑Destructive Scans
AURA — Automated Unified Risk Assessment
AURA is a lightweight web security scanner CLI. It crawls a target, detects technologies, and runs non‑destructive checks for common issues like reflected XSS, basic SQLi patterns, path traversal, command injection, and file inclusion. It logs findings with severities and can export a JSON report.
CLI-First
JSON Reports
Safe Checks
Features
- • Smart crawler with deduplication
- • Technology fingerprint hints
- • Non‑destructive vulnerability checks
- • Severity‑tagged findings
- • Structured JSON report output
Checks
- • Reflected XSS
- • Basic SQL injection patterns
- • Directory traversal
- • Command injection
- • LFI/RFI indicators
Design
Minimal, responsive, and accessible. Subtle background motion adapts to reduced‑motion preferences. Works entirely in the browser without dependencies.
Demo Scan (simulated)
Open JSON Report
Load a JSON report exported from AURA.
Findings Table
| Severity | Type | Location | Detail |
|---|---|---|---|
| No report loaded | |||
CLI Usage
# Install and run AURA (example)
python3 aura.py --target https://example.com --crawl --safe-checks --report aura-report.json
# Options (typical)
--target <url> Target root URL
--crawl Enable crawler
--safe-checks Run non-destructive checks (XSS, SQLi, traversal, etc.)
--tech-detect Attempt technology fingerprinting
--report <file> Save JSON report to file