astrava - Astrava is an advanced, AI-powered web application

项目说明

<di="center">

<img src="logo.png" alt="Astrava Logo" width="200"/>

🛡️ Astrava AI Security Scanner

*Ad AI-Powered Web Scanner*

![Python]()
![OWASP]()
![AI]()
![Platform]()

Professional-grade security testing tool for penetration testers and security researchers

🚀 Quick Start • 📖 Documentation • 🤝 Contributing • ⭐ Star Us

</div>

---

🌟 O

Astrava is a cutting-edge web security scanner that seamlessly combines traditional detection with AI-powered analysis using local Ollama models. Built for security professionals who value both power and privacy.

✨ Key Features

<table>
<tr>
<td width="50%">

#### 🤖 AI-Powered Analysis

Local Ollama integration

Pri processing

No cloud dependencies

Multiple model support

#### 🛡️ OWASP Top 10 2021

Complete co

A01 to A10 categories

Real-world attack scenarios

Professional reporting

</td>
<td width="50%">

#### 🌐 Modern Web Interface

Real-time feed

Live scan statistics

Intuiti

Dark theme UI

#### ⚡ Smart & Fast

Intelligent payload caching

Multi-threaded scanning

Optimized performance

Quick scan modes

</td>
</tr>
</table>

🎯 Why Choose Astrava?

---

🚀 Quick Start

📦 Installation

<details open>
<summary><b>🪟 Windows</b></summary>

Note: The installer automatically creates a Python en and installs all dependencies.

</details>

<details>
<summary><b>🐧 Linux</b></summary>

Note: The installer automatically creates a Python en and installs all dependencies.

</details>

<details>
<summary><b>🍎 macOS</b></summary>

Note: The installer automatically creates a Python en and installs all dependencies.

</details>

🎮 Launch Application

#### 🌐 Web GUI Mode (Recommended)

Then open your browser at:

#### 💻 CLI Mode

---

💻 System Requirements

Minimum Requirements

<table>
<tr>
<td width="50%">

#### 🖥️ Hardware

CPU: Dual-core processor (2 GHz+)

RAM: 4 GB minimum

- 2 GB for Astrava
- 2 GB for AI models (if using Ollama)

Storage: 5 GB free space

- 500 MB for Astrava
- 2-4 GB for AI models

Network: Internet connection required

</td>
<td width="50%">

#### 💿 Software

OS: Windows 10+, Linux, macOS 10.15+

Python: 3.8 or higher

Browser: Modern browser (Chrome, Firefox, Edge)

Ollama: Optional (for AI features)

Git: For installation from source

</td>
</tr>
</table>

Recommended Requirements

<table>
<tr>
<td width="50%">

#### 🚀 For Best Performance

CPU: Quad-core processor (3 GHz+)

RAM: 8 GB or more

Storage: 10 GB free space

Network: Broadband connection

</td>
<td width="50%">

#### 🤖 For AI Features

RAM:

- 2 GB: llama3.2:1b (lightweight)
- 4 GB: llama3.2:3b (balanced)
- 8 GB: mistral:7b (powerful)

Ollama: Latest

GPU: Optional (speeds up AI)

</td>
</tr>
</table>

Supported Platforms

| Platform | | Status | Notes |
|:--------:|:---------|:------:|:------|
| 🪟 Windows | 10, 11, Server 2019+ | ✅ Fully Supported | Use install.bat |
| 🐧 Linux | Ubuntu 20.04+, Debian 10+, Fedora 35+, Arch, Kali | ✅ Fully Supported | Use install.sh |
| 🍎 macOS | 10.15+ (Catalina and later) | ✅ Fully Supported | Intel & Apple Silicon |

---

📋 Software Requirements

| Component | | Required | Notes |
|-----------|---------|----------|-------|
| 🐍 Python | 3.8+ | ✅ Yes | Core runtime |
| 🌐 Internet | - | ✅ Yes | For scanning targets |
| 🤖 Ollama | Latest | ⚠️ Optional | For AI features |

🤖 AI Setup (Optional but Recommended)

<details>
<summary><b>Click to expand AI setup instructions</b></summary>

#### Step 1: Install Ollama

Windows: Download from ollama.ai

Linux: curl -fsSL | sh

macOS: brew install ollama

#### Step 2: Download AI Model

Choose based on your system resources:

#### Step 3: Configure in Astrava

1. Launch: python astrava.py
2. Na to AI Model Settings
3. Select your downloaded model
4. Click Sa

✅ Done! AI-powered scanning is now active.

</details>

---

🎚️ Scan Modes

<table>
<thead>
<tr>
<th width="20%">Mode</th>
<th width="30%">Description</th>
<th width="15%">Duration</th>
<th width="35%">Best For</th>
</tr>
</thead>
<tbody>
<tr>
<td><b>⚡ Basic</b></td>
<td>Fast scan, core </td>
<td>1-3 min</td>
<td>Quick security assessment</td>
</tr>
<tr>
<td><b>🎯 Standard</b></td>
<td>OWASP Top 10 + scan</td>
<td>5-15 min</td>
<td>Regular security testing</td>
</tr>
<tr>
<td><b>🔥 Aggressive</b></td>
<td>Full scan + chain attacks + deep AI</td>
<td>15-45 min</td>
<td>Comprehensi audit</td>
</tr>
</tbody>
</table>

---

🛡️ OWASP Top 10 Co

<di="center">

| # | Category | Tests Included | Status |
|:-:|----------|----------------|:------:|
| A01 | 🔓 Broken Access Control | IDOR, Path Tra, Forced Browsing | ✅ |
| A02 | 🔐 Cryptographic Failures | SSL/TLS, Weak Ciphers, Sensitive Data | ✅ |
| A03 | 💉 Injection | SQL, NoSQL, LDAP, Command, XSS | ✅ |
| A04 | 🎨 Insecure Design | Debug Info, Business Logic Flaws | ✅ |
| A05 | ⚙️ Security Misconfiguration | Headers, Default Creds, Error Handling | ✅ |
| A06 | 📦 Components | Detection, C | ✅ |
| A07 | 🔑 Authentication Failures | Cookie Security, Session Management | ✅ |
| A08 | 🔗 Software & Data Integrity | Deserialization, Supply Chain | ✅ |
| A09 | 📊 Logging & Monitoring | Logging Gap Assessment | ✅ |
| A10 | 🌐 SSRF | Cloud Metadata, Internal Services | ✅ |

</div>

---

🔧 Ad Usage

📝 Command-Line Options

<details>
<summary><b>View all a options</b></summary>

#### 🎯 Basic Options

No arguments → Launch Web GUI (default)

-u, --url URL → Target URL for CLI scan

-- → Show information

--help → Display help message

#### 🔍 Scan Options

--owasp-all → Test all OWASP Top 10 categories

--chain-attacks → Enable multi-step attack detection

--passi → Passi only

--acti → Acti only

#### ⚙️ Configuration

--model MODEL → AI model to use (default: xploiter/pentester)

--threads N → Concurrent threads (default: 10)

--timeout SEC → Request timeout (default: 30)

--custom-payloads FILE → Custom payload file

#### 📊 Output Options

-o, --output DIR → Output directory for reports

--format FORMAT → Report format (html, json, pdf)

- → Enable detailed logging

</details>

🎯 Usage Examples

---

📊 Reports

Reports are automatically saved to the reports/ directory with:

<table>
<tr>
<td width="50%">

📈 Report Contents

✅ Executi

✅ Risk Score (0-100)

✅ Breakdown

✅ Detailed Findings

✅ AI-Generated Analysis

✅ Remediation Guidance

</td>
<td width="50%">

🎨 Report Features

🌐 Professional HTML format

📊 charts and graphs

🎯 Se classification

🔗 CWE references

📝 OWASP mapping

💡 Fix recommendations

</td>
</tr>
</table>

---

📁 Project Structure

---

🌍 Cross-Platform Support

<di="center">

| Platform | Status | Tested |
|:--------:|:------:|:----------------|
| 🪟 Windows | ✅ Fully Supported | 10, 11, Server 2019+ |
| 🐧 Linux | ✅ Fully Supported | Ubuntu 20.04+, Debian 10+, Fedora 35+, Arch, Kali |
| 🍎 macOS | ✅ Fully Supported | 10.15+ (Intel & Apple Silicon) |

</div>

---

🚀 Performance

<table>
<tr>
<td align="center" width="33%">
<h3>⚡ Fast</h3>
Multi-threaded scanning<br/>
Smart payload caching<br/>
Optimized algorithms
</td>
<td align="center" width="33%">
<h3>🎯 Accurate</h3>
Low false positives<br/>
AI-powered <br/>
Real-world attack scenarios
</td>
<td align="center" width="33%">
<h3>🔒 Secure</h3>
Local AI processing<br/>
No data leakage<br/>
Pri design
</td>
</tr>
</table>

---

📚 Documentation

🎓 Quick Reference

| Command | Description |
|---------|-------------|
| python astrava.py | Launch Web GUI |
| python astrava.py -u <URL> | CLI scan mode |
| python astrava.py --help | Show help |
| python astrava.py -- | Show |
| python .py | installation |

📖 Additional Resources

🌐 GitHub Repository

📧 Email Support

🐛 Report Issues

⭐ Star on GitHub

---

⚠️ Legal Disclaimer

<di="center">

🚨 IMPORTANT: READ BEFORE USE 🚨

</div>

> This tool is designed for AUTHORIZED SECURITY TESTING ONLY.

#### ✅ Permitted Use

✓ Testing systems you own

✓ Testing with explicit written permission

✓ Educational purposes in controlled en

✓ Security research with proper authorization

#### ❌ Prohibited Use

✗ Unauthorized scanning of third-party systems

✗ Malicious acti or attacks

✗ computer crime laws (CFAA, GDPR, etc.)

✗ Any illegal or unethical acti

#### 📜 Your Responsibilities

Obtain proper authorization before scanning

Comply with all applicable laws and regulations

Use the tool ethically and responsibly

Respect privacy and data protection laws

By using this tool, you agree to use it responsibly and legally. The authors assume NO LIABILITY for misuse or damages.

---

🤝 Contributing

We welcome contributions from the community! Here's how you can help:

<table>
<tr>
<td align="center" width="25%">
<h3>🐛</h3>
<b>Report Bugs</b><br/>
Found a bug?<br/>
<a href=" an issue</a>
</td>
<td align="center" width="25%">
<h3>💡</h3>
<b>Suggest Features</b><br/>
Have an idea?<br/>
<a href=" it with us</a>
</td>
<td align="center" width="25%">
<h3>🔧</h3>
<b>Submit PRs</b><br/>
Want to code?<br/>
<a href=" a pull request</a>
</td>
<td align="center" width="25%">
<h3>⭐</h3>
<b>Star the Repo</b><br/>
Like the project?<br/>
<a href=" us a star!</a>
</td>
</tr>
</table>

🔄 Contribution Process

1. 🍴 Fork the repository
2. 🌿 Create a feature branch (git checkout -b feature/amazing-feature)
3. ✍️ Commit your changes (git commit -m 'Add amazing feature')
4. 📤 Push to the branch (git push origin feature/amazing-feature)
5. 🎉 Open a Pull Request

---

📝 License

<di="center">

MIT License - Free and Open Source


This project is licensed under the MIT License - see the LICENSE file for details.

</div>

---

👤 Author

<di="center">

RAM (Ram Prasad Sahoo)

![GitHub]()
![LinkedIn]()

</div>

---

🙏 Acknowledgments

<di="center">

Special thanks to:

🛡️ OWASP Foundation - For security testing guidelines
🤖 Ollama Team - For local AI infrastructure
🌟 Open Source Community - For inspiration and support
💻 Contributors - For making this project better

</div>

---

📊 Project Stats

<di="center">

!GitHub stars
!GitHub forks
!GitHub watchers

</div>

---

<di="center">

🌟 If you find Astra, please consider giving it a star! ⭐

![Star History Chart]()

---

Made with ❤️ by Ram Prasad Sahoo

Happy Ethical Hacking! 🛡️

</div>

---

<di="center">

*Last Updated: April 2026 • 1.1.0*

</div>

项目信息

开发语言：Python

Star 数：14

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Astrava is an advanced, AI-powered web application security scanner designed to automatically discover and report vulnerabilities in your web applications. Leveraging cutting-edge artificial intelligence, Astrava efficiently identifies common and complex security flaws, providing actionable insights to secure your deployments faster.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。