Vultrex-AI-Scanner is a powerful, context-aware Jython extension for Burp Suite designed to supercharge your manual and automated VAPT (Vulnerability Assessment and Penetration Testing) workflows. Backed by Claude 3.7, this extension goes beyond basic fuzzing to analyze complex HTTP requests/responses and discover advanced security flaws.
- 🧠 Context-Aware Scanning: Doesn't just match regex patterns. It understands the application logic (ASP.NET ViewStates, custom API structures, multi-step parameters).
- 🛡️ WAF & Filter Bypass: When standard payloads get blocked (e.g., 500 Internal Server Errors), the AI dynamically suggests advanced bypass vectors (SVG events, double encoding, tag variations).
- 🔴 Critical Flaw Identification: High-accuracy detection for SQL Injection, SSRF (Cloud Metadata probing), IDOR/OTP logic flaws, and LFI.
- 📊 Instant VAPT Reporting: Automatically categories findings into Critical, High, Medium, and Low with ready-to-test Proof of Concept (PoC) payloads.
- 📉 90% Less Noise: Eliminates time-wasting false positives by acting as an intelligent second-reviewer.
This extension runs on a secure Client-Server Architecture. To protect the core logic and ensure smooth execution, you need to run the local backend server (osint.py) and load the client extension into Burp Suite.
The ocean.py file handles the core processing and data formatting locally on your system.
- Open your terminal or command prompt.
- Navigate to the directory containing
osint.py. - Install dependencies (if any) and run the script using Python 3:
python osint.py
Unlike traditional scanners that dump thousands of noisy payloads, Vultrex AI Scanner operates via a secure architecture:
- Capture: It intercepts raw traffic inside Burp Suite.
- Analyze: The extension forwards structured telemetry to the Vultrex core engine.
- Exploit/Verify: The AI reviews server behavior (headers, encoding, status codes) to generate pinpoint bypass attacks.
- Burp Suite (Community or Professional)
- Jython Standalone (Environment configured in Burp)
- Download the latest compiled version (
vultrex_scanner.pyor.pyc) from the Releases section. - Open Burp Suite -> Go to Extensions tab -> Click Add.
- Select Extension Type as Python and browse to the downloaded file.
- Boom! Look at your output console for the Vultrex welcome banner.
This tool is developed for educational and authorized penetration testing purposes only. Testing targets without explicit written permission is illegal. The developers at Vultrex Sec are not responsible for any misuse or damage caused by this program.
Developed with ❤️ by Vultrex Sec. We are building the future of offensive AI security solutions.
- Website: vultrexsec.com
- Founder/CEO: Deepak Kumar