discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens

v3n0m-Scanner/V3n0M-Scanner · source

Snapshot 0 · 2026-11-04T12:47:22Z · Python · GPL-3.0

GitHub description at capture

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

README at capture

# Venom

![venom](venom.png)

#### Offensive Security Framework for Vulnerability Scanning & Pentesting

![os](https://img.shields.io/badge/OS-Linux,%20Windows-green.svg)
[![pythonver](https://img.shields.io/badge/python-3.6%2B-green.svg)](https://www.python.org/downloads/release/python-3614)
[![License: GPLV3](https://img.shields.io/badge/License-GPLv3-green.svg)](https://www.gnu.org/licenses/gpl-3.0)
[![Docker Pulls](https://img.shields.io/docker/pulls/vittring/venom.svg)](https://hub.docker.com/r/vittring/venom/)
[![Docker Image Size](https://img.shields.io/docker/image-size/vittring/venom.svg?sort=date)](https://hub.docker.com/r/vittring/venom/)
[![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)

> **Warning**: Version 4.3.3 now requires PROXIES/VPN.

##### Features

- [x] Cloudflare Resolver [Cloudbuster]
- [x] LFI->RCE and XSS Scanning [LFI to RCE & XSS]
- [x] SQL Injection Vuln Scanner [SQLi]
- [x] Extremely Large D0rk Target Lists
- [x] Detects known WAFs
- [x] AdminPage Finding
- [x] CCTV/Networked Interfaces discovery [WIP] <<<<
- [x] Vulnerable FTPs Scanner [Toxin]
- [x] DNS Bruteforcer
- [x] Python 3.6 asyncio based scanning
- [x] Cloudflare resolver
- [x] Extremely quick "Toxin" Vulnerable IP scanner to scan potentially millions of ips for known vulnerable services.
- [x] Free and Open /src/
- [x] Cross-platform Python-based toolkit
- [x] Licensed under GPLv3
- [x] Built by hackers with full transparency
- [x] No more issues with dependencies from pre-alpha release

![Example of SQLi Dorker](https://github.com/v3n0m-Scanner/V3n0M-Scanner/blob/master/src/AnimatedDemo.gif?raw=true "Example of Dorker Features")

**This is outdated.**

**NOTE:** You MUST install these on Ubuntu and Kali.

Ubuntu users:
Please make sure you `sudo apt-get install python3-bs4` | `apt-get install python3-setuptools`

Kali users:
Please `apt-get install python3-dev` | `apt-get install python-dev`

**NOTE:** Install Poetry for deps:

`curl -sSL https://install.python-poetry.org | python3 - poetry install # install deps poetry update # when you want to check for deps updates`

Docker users:
Please see [Dockerfile](docker/README.md)

## Contact Information:

    Submit a bug report/pull request with prefix "Query" at the start.

## Credits to:

    - Architect for the initial encouragement and support in V3n0ms early days
    - SageHack for allowing Cloudbuster to be adapted for use within V3n0M
    - D35m0nd142 for allowing Collaboration and the use of LFI Suite within V3n0M
    - b4ltazar & all members of darkc0de.com for inspiring the project with darkd0rk3r

## Make Love and Smoke Trees.