chaitin/xray
Xray
Xray is a security assessment tool focused on web vulnerability scanning, attack surface mapping, and technology fingerprinting. It identifies common security flaws through automated scanning and semantic analysis, while verifying findings via a custom proof-of-concept execution engine.
The system distinguishes itself with a containerized vulnerability testbed used to deploy pre-configured vulnerable applications. This environment allows for the simulation of specific vulnerabilities and edge-case scenarios to validate scanner accuracy and eliminate false positives.
The platform covers a broad range of security capabilities, including recursive web crawling for directory enumeration, real-time HTTP traffic interception via a proxy layer, and baseline security checks for SSL versions and HTTP headers. It features a template-based plugin system for extending vulnerability checks and supports exporting findings into text, JSON, or HTML formats.
Features
- Web Vulnerability Scanning - Combines web crawling for link discovery with automated vulnerability scanning to identify security weaknesses.
- Security Assessment Frameworks - Automates the end-to-end process of vulnerability detection and security reporting across multiple targets.
- PoC Execution Engines - Runs user-defined or community-provided scripts to verify the existence of specific vulnerabilities on target systems.
- Script Execution Engines - Includes a framework for executing user-defined proof-of-concept scripts to verify specific vulnerabilities.
- Vulnerability Testbeds - Provides a containerized testbed to deploy pre-configured vulnerable applications for validating scanner accuracy.
- Traffic Proxying - Intercepts and analyzes live HTTP requests through a local proxy to detect vulnerabilities in real-time.
- Attack Surface Mapping - Maps the web attack surface by discovering hidden paths and sensitive files through directory enumeration.
- Proof of Concept Execution - Runs custom proof-of-concept scripts to verify if targets are susceptible to identified vulnerabilities.
- Vulnerability Testbeds - Ships a containerized testbed for deploying vulnerable applications to validate scanner accuracy.
- Vulnerable Web Applications - Deploys containerized web applications intentionally designed with security flaws to test and validate scanners.
- Web Crawlers - Implements a recursive web crawler to discover the attack surface and enumerate hidden directories.
- Request-Response Pattern Analysis - Uses a semantic analysis engine to detect vulnerabilities by matching request and response patterns against known flaw signatures.
- PoC Generation Tools - Creates and verifies proof-of-concept scripts through packet verification and duplication checks.
- Plugin Extensibility - Provides a plugin extensibility system for implementing new vulnerability checks and PoC logic.
- Proxy Interceptors - Ships a proxy layer to capture and analyze live HTTP traffic for real-time vulnerability detection.
- Sensitive File Discovery - Implements directory enumeration to find backup files, temporary files, and configuration pages.
- Scanner Accuracy Validation - Deploys controlled vulnerable environments to verify detection script accuracy and eliminate false positives.
- Simulated Vulnerabilities - Mimics common vulnerabilities and error messages to verify scanner accuracy and trigger false positives.
- Web Technology Detection - Identifies the software and frameworks running on target servers through technology fingerprinting.
- Plugin-Based Architectures - Features a template-based plugin system allowing users to dynamically load custom vulnerability check scripts.
- Scanner Accuracy Validators - Provides a process for running scans against edge-case scenarios to identify and eliminate false positives in detection scripts.
- Infrastructure Scanners - Advanced passive and active web application security scanner.
- Vulnerability Exploitation Tools - Advanced vulnerability scanner for web applications.
- Vulnerability Scanners - Powerful security assessment tool for web applications.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
