Kayra is a web application vulnerability scanner and a penetration tester. It is capable of scanning a broad spectrum of known vulnerabilities in web applications and websites.


Key Features:

✔ Your device does NOT have to be rooted in order to use Kayra! All of the test suites included are written as native Android routines.

✔ Kayra does not send or save your data in external containers such as storage servers or cloud systems. This provides data confidentiality for the users.

✔ Kayra does not use scripts written by other developers without their consent and it does not contain any copyrighted content.

✔ The test list include a variety of tests ranging from simple directory enumerators to complex HTTPS protocol testers.

✔ Kayra can work in background too! It will warn you when the test is finished.

✔ The framework runs tests in parallel connections with a large pool of threads to provide quickest results.

✔ You can mail the results to your e-mail address or save the results to your smartphone for later use.

✔ Kayra will always be updated regularly and will include new tests.


The project is designed and written by Göktay KAYKUSUZ, as known as me. It is a one man band project therefore might contain small bugs, but only the cute ones. Not those flying scary ones.

Hope it will be useful to you. If you have any questions and/or concerns, reach me by e-mail or mention it in your comment!


WARNING: You should not apply any of the tests which Kayra includes, without getting necessary permissions from the owners of the target host. Failure to do so might put your actions in an illegal state.