R-AScan (Rusher Automatic Scanner)

Overview

R-AScan is a modular, multithreaded vulnerability scanner framework written in Python. It dynamically loads all .py scanner modules in the scanners/ directory and executes them against a target. Each module returns structured output and is saved to a JSON file for analysis.

Features

• Modular architecture (drop-in .py modules)
• Multithreaded execution using thread pool
• Auto-update scanner modules from GitHub
• JSON output format
• CLI-based execution with multiple options
• Includes scanners for:
  • Local File Inclusion (LFI)
  • Remote Code Execution (RCE)
  • Cross-Site Scripting (XSS)
  • Server-Side Request Forgery (SSRF)
  • SQL Injection (SQLi)
  • Open Redirect
  • Security Headers
  • Sensitive Files
  • Fingerprinting
  • Admin Panel Finder
  • Rate Limiting
  • SSTI
  • LDAP Injection
  • and others

Requirements

• Python 3.8 or newer
• requests library

Installation

Repository clone:

git clone https://github.com/ICWR-TEAM/R-AScan
cd R-AScan
pip install -r requirements.txt
python3 R-AScan.py --help

Install with PIP:

python3 -m pip install R-AScan

Usage

python3 R-AScan.py -x <target> [options]

Or (Install with PIP)

R-AScan -x <target> [options]

$$$$$$$\           $$$$$$\   $$$$$$\                               
$$  __$$\         $$  __$$\ $$  __$$\                              
$$ |  $$ |        $$ /  $$ |$$ /  \__| $$$$$$$\ $$$$$$\  $$$$$$$\  
$$$$$$$  |$$$$$$\ $$$$$$$$ |\$$$$$$\  $$  _____|\____$$\ $$  __$$\ 
$$  __$$< \______|$$  __$$ | \____$$\ $$ /      $$$$$$$ |$$ |  $$ |
$$ |  $$ |        $$ |  $$ |$$\   $$ |$$ |     $$  __$$ |$$ |  $$ |
$$ |  $$ |        $$ |  $$ |\$$$$$$  |\$$$$$$$\\$$$$$$$ |$$ |  $$ |
\__|  \__|        \__|  \__| \______/  \_______|\_______|\__|  \__|
===================================================================
[+] R-AScan (Rusher Automatic Scan) | HarshXor - incrustwerush.org
===================================================================

[-] [A target must be specified unless the --update option is used]

usage: R-AScan.py [-h] [-x TARGET] [-t THREADS] [-o OUTPUT] [-p PORT] [--path PATH] [--update] [--verbose] [--optimize]

options:
  -h, --help            show this help message and exit
  -x, --target TARGET   Target host (domain or IP)
  -t, --threads THREADS
                        Number of threads to use (default: 5)
  -o, --output OUTPUT   Custom output file path (optional)
  -p, --port PORT       Custom PORT HTTP/S (optional)
  --path PATH           Custom PATH URL HTTP/S (optional)
  --update              Only update scanner modules without scanning
  --verbose             Verbose detail log
  --optimize            Optimize result with machine learning

Examples

python3 R-AScan.py -x example.com
python3 R-AScan.py -x 192.168.1.1 -t 10 -o output.json
python3 R-AScan.py --update

Or (Install with PIP)

R-AScan -x example.com
R-AScan -x 192.168.1.1 -t 10 -o output.json
R-AScan --update

Arguments

• -x, --target — Target domain or IP address (required unless using --update)
• -t, --threads — Number of threads (default: 5)
• -o, --output — Path to save JSON result (optional)
• -p, --port - Custom PORT HTTP/S (optional)
• --path - Custom PATH URL HTTP/S (optional)
• --update — Update scanner modules from GitHub and exit
• --verbose — Print detailed output from each module
• --optimize - Optimize result with machine learning

Output

The scan result will be saved as:

scan_output-<target>.json

If the -o option is specified, it will be saved to the given custom path.

Each scanner module contributes a dictionary entry in the JSON output, grouped under the result key.

Writing a Custom Module

1. Create a new Python file in scanners/, for example my_scan.py
2. Define a function scan(args) that returns a dictionary or list
3. Access the target using args.target

Example

import requests

def scan(args):
    url = f"http://{args.target}/test"
    try:
        response = requests.get(url, timeout=10)
        return {
            "url": url,
            "status_code": response.status_code
        }
    except Exception as e:
        return {"error": str(e)}

The main framework will automatically discover and execute this module.

Updating Modules

To update scanner modules directly from the GitHub repository:

python3 R-AScan.py --update

Or (Install with PIP)

python3 R-AScan.py --update

All .py files in the scanners/ directory will be downloaded and replaced.

License

This project is licensed under the MIT License.

Developed by HarshXor — https://incrustwerush.org