All in XrayScan

All in XrayScan

Version 2.0

• XrayRad-nopush: Batch general version, generate reports directly!

                ____                        __________     . ___
        /  / ___________  ___ . __ .    ______    _____     __ | _ /
          / _  __  __   <   |  |    |       _ /  __     / __ |
     /      |  |  // __ \ ___  |    |    |    / __ _ / / _ / |
    / ___ /    | __ |  ( ____  / ____ | ____ | ____ | _  / ( ____  /  ____ |
          _ /            /  /   / _____ /       /       /       /

                                        Author :	loecho       
                                        Date :   2021 / 09 / 24      

    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                 sqlin           SQL注入漏洞探测
                 cmd             命令执行漏洞探测
                 xss             XSS漏洞探测
                 xxe             XXE漏洞探测
                 base            baseline
                 path            目录穿越
                 upload          文件上传
                 brute           暴力破解
                 dir             目录扫描
                 urlred          任意uRL跳转
                 crlf            CRLF
                 thinkphp        THINKPHP系列漏洞探测
                 shiro           SHIRO系列漏洞探测
                 fastjson        FASTJSON系列漏洞探测
                 struts          STRUTS系列漏洞探测

            usage :

                 < 1 > allType -漏洞检测
                     python3 xrayRad . py url . txt all

                 < 2 > SQL注入漏洞检测
                     python3 xrayRad . py url . txt sqlin

• Single type and all types are also supported!

• The crawler is modified to a double crawler (RAD + CrawleGo). The purpose is to rather crawl more than to miss crawling!

• Concurrent processes are modified into process pools for efficient concurrency!

• Save CrawleGo’s crawling results and crawling paths, and pay attention to them during subsequent manual testing!

• Temporarily completed, please report any bugs in time!

Version 1.0:

• XrayRad-Scan: For Advanced Edition users, use Xray Advanced Edition to perform batch crawling and scanning!

    _  __                  ____            __     _____
   | |/ /_________ ___  __/ __ ____ _____/ /    / ___/_________ _____
   |   // ___/ __ `/ / / / /_/ / __ `/ __  /_______ / ___/ __ `/ __ \
  /   |/ /  / /_/ / /_/ / _, _/ /_/ / /_/ /_____/__/ / /__/ /_/ / / / /
 /_/|_/_/   __,_/__, /_/ |_|__,_/__,_/     /____/___/__,_/_/ /_/
                 /____/

                                                     Version:    v1.0
                                                     Author:     loecho
                                                     Blog:       https://loecho.me

Usage：

Scanning effect:

[1] Batch scanning of all types of vulnerabilities:

[2] Single type vulnerability scanning:

Version 1.1:

• XrayRad: for community edition users, using Rad and Xray for batch crawling
• XrayRad-WechatPush-server: WeChat real-time push server implemented to cooperate with community version scanning

    ____                        __________             .___
   /  /___________  ___.__.   ______   _____     __| _/
      /_  __ __  <   |  |    |       _/__     / __ |
 /      |  | // __ \___  |    |    |    / __ _/ /_/ |
/___/  |__|  (____  / ____|____|____|_  /(____  /____ |
      _/           //   /_____/      /      /      /


                     Usage:
                            python3 Xray_rad.py -all 全类型扫描
                            python3 Xray_rad.py sqlin sql注入扫描
                            
                     Author:	Chr1sto 
                            
                     Date:	    2020/09/01

Scanning effect:

[1] Scanning all types of vulnerabilities

Start XrayRad-Wechat-Push:

Push results:

You can understand the specific configuration file by looking at the code, and the crawling results are saved in the vulnerability occurrence time format!

There is no technical content, please don’t criticize me!