Skip to content

Commit 619ec4f

Browse files
committed
Update plugins guides
1 parent ecb25af commit 619ec4f

File tree

5 files changed

+31
-13
lines changed

5 files changed

+31
-13
lines changed

README.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,14 +10,16 @@
1010

1111
## Overview
1212

13-
**Vimana** is a modular security framework for auditing Python web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques.
13+
**Vimana** is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques.
1414

1515
**Core Capabilities:**
1616
- Vulnerability detection and exploitation
1717
- Static and dynamic analysis
1818
- Application crawling and discovery
1919
- Persistence and post-exploitation analysis
2020
- CI/CD security integration
21+
- Research & Development (R&D)
22+
2123

2224
---
2325

core/vmnf_arg_parser.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -100,6 +100,8 @@ def parse_args(self):
100100
list_cmd.add_argument('--siddhis', action='store_true',dest='module_list')
101101
list_cmd.add_argument('--scans', action='store_true',dest='list_scans')
102102
list_cmd.add_argument('--channels', action='store_true',dest='list_channels')
103+
list_cmd.add_argument('--workflows', action='store_true',dest='list_workflows')
104+
list_cmd.add_argument('--specs', action='store_true',dest='list_specs')
103105
list_cmd.add_argument('--summary', action='store_true', dest='channels_summary', help='Show channels in compact summary format')
104106
list_cmd.add_argument('--channel-type', action='store', dest='channel_type', help='Filter channels by type (RCE, File Write, etc.)')
105107
list_cmd.add_argument('--channel-plugin', action='store', dest='channel_plugin', help='Filter channels by plugin name')

core/vmnf_smng.py

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,7 @@
1818
from ._dbops_.db_utils import handle_OpErr
1919
from .vmnf_navi_siddhis import navisiddhis
2020
#from .setevars import set_vimana_path
21+
from core.load_settings import _version_
2122

2223
from res.vmnf_banners import case_header
2324
from .vmnf_asserts import vfasserts
@@ -248,7 +249,7 @@ def list_siddhis(self):
248249

249250
#case_header()
250251
#print("\033c", end="")
251-
vimana_version = cl('Vimana v1.0', 77,attrs=['bold'])
252+
vimana_version = cl(f'Vimana v{_version_}', 77,attrs=['bold'])
252253
vimana_desc = cl('(Security & Automation Tools for Python Web Frameworks)', 77,attrs=['bold'])
253254
plugin_catalog = cl('Plugin Catalog', 15) # or 97 for bright white
254255

@@ -260,7 +261,7 @@ def list_siddhis(self):
260261
{vimana_desc}
261262
"""
262263

263-
#cprint(vimana_banner, 77)
264+
cprint(vimana_banner, 77)
264265

265266

266267
if self.handler.get('fancy_table'):

siddhis/d4m8/d4m8.md

Lines changed: 17 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -26,22 +26,30 @@ At its core, D4M8 excels at extracting valuable information from unhandled excep
2626

2727
This command lists all available plugins in the Vimana framework, allowing you to see which tools are at your disposal.
2828

29-
`vimana list --plugins`
30-
![image](https://github.com/user-attachments/assets/d846a465-7c05-47dd-9449-17b11350c308)
29+
```bash
30+
vimana list --plugins
31+
```
32+
<img width="1858" height="948" alt="image" src="https://github.com/user-attachments/assets/9eb9d0b7-a771-4150-aea9-1b8ef09e15e2" />
3133

3234
To get detailed information about a specific plugin, use the `info` command. Here, we inspect the `d4m8` plugin.
3335

34-
`vimana info --plugin d4m8`
36+
```bash
37+
vimana info --plugin d4m8
38+
```
3539
![image](https://github.com/user-attachments/assets/f5b46282-5207-41c8-9e5a-3ef896441ea2)
3640

3741
The `guide` command with the `--args` flag displays all the available arguments for a plugin, helping you understand how to use it.
3842

39-
`vimana guide --plugin d4m8 --args`
43+
```bash
44+
vimana guide --plugin d4m8 --args
45+
```
4046
![image](https://github.com/user-attachments/assets/610acd0c-2064-4d9c-a105-ffeb1e90cae4)
4147

4248
For practical examples of how to use a plugin, the `guide` command with the `--examples` flag is very useful.
4349

44-
`vimana guide --plugin d4m8 --examples`
50+
```bash
51+
vimana guide --plugin d4m8 --examples
52+
```
4553
![image](https://github.com/user-attachments/assets/c5222830-e4f5-4a69-a269-aac20450e28a)
4654

4755
### Lab Setup
@@ -137,7 +145,9 @@ graph LR
137145
```
138146

139147
#### Basic Scan
140-
`vimana run d4m8 --target-url http://localhost:8000`
148+
```bash
149+
vimana run d4m8 --target-url http://localhost:8000
150+
```
141151

142152
##### 🔌 Stage 1: DMT - Scope Enrichment
143153
The first phase involves scope enrichment using `DMT (Django Misconfiguration Tracker)`. This component:
@@ -850,7 +860,7 @@ This suggests a potential authentication and authorization problem where:
850860
3. Unauthenticated requests (user_id == None) can trigger database operations
851861

852862
The SQL query shows:
853-
```Python
863+
```sql
854864
sql: ('QUERY = \'INSERT INTO "taskManager_project_users_assigned" ("project_id", ' '"user_id") SELECT %s AS "project_id", %s AS "user_id"\' - PARAMS = (30, ' 'None)')
855865

856866
```

siddhis/framewalk/framewalk.md

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -107,8 +107,11 @@ Applies advanced pattern recognition across multiple detection vectors:
107107

108108
The Vimana framework provides a comprehensive suite of security testing tools. Let's start by exploring the available plugins:
109109

110-
`vimana`
111-
![image](https://github.com/user-attachments/assets/7b84db0a-0cc2-4a17-a10b-fac8b93d3927)
110+
```bash
111+
vimana
112+
```
113+
<img width="1432" height="629" alt="image" src="https://github.com/user-attachments/assets/2fc1ea3a-b6ab-4720-85db-474f679d3907" />
114+
112115

113116
#### Listing Available Plugins
114117

@@ -117,7 +120,7 @@ To see all available plugins in the Vimana framework:
117120
```bash
118121
vimana list --plugins
119122
```
120-
![image](https://github.com/user-attachments/assets/57fae534-d5d8-4d42-b3e4-e0a06ef91a7b)
123+
<img width="1858" height="948" alt="image" src="https://github.com/user-attachments/assets/9eb9d0b7-a771-4150-aea9-1b8ef09e15e2" />
121124

122125
As shown in the output, Framewalk is classified as a **fingerprint** plugin, designed specifically for framework detection and analysis.
123126

0 commit comments

Comments
 (0)