Home
Softono
xray-automation

xray-automation

Open source Shell
20
Stars
3
Forks
0
Issues
1
Watchers
1 year
Last Commit

About xray-automation

xray-automation is a Bash script that simplifies vulnerability scanning using Xray, a popular security assessment tool from Chaitin. The script automates downloading Xray if it is not already installed, then provides a command-line interface to run scans against web targets. Key features include scanning a single URL with a simple flag, batch scanning a list of URLs from a text file, automatic download and extraction of the Xray binary, a help option for usage guidance, and output of findings both in the terminal and saved to a results file. Requirements are Bash, wget, unzip, python3 with the venv module, and pip. Typical use cases include penetration testing, bug bounty hunting, routine security assessments of web applications, and quickly triaging multiple URLs for common vulnerabilities. Users should read the documentation before running and may need appropriate permissions or sudo for installation steps.

Platforms

Web Self-hosted

Languages

Shell

Xray automation Script

This repository contains a Bash script for downloading and using Xray to scan websites for vulnerabilities. The script provides options to scan a list of URLs from a file or a single URL, and it can also handle downloading Xray if it is not already installed.

Features

  • Scan a list of URLs from a text file.
  • Scan a single URL.
  • Download Xray if it is not already installed.
  • Help documentation to guide users.

Requirements

  • Bash
  • wget
  • unzip
  • python3 with venv module
  • pip (Python package installer)

Usage

Download Xray

To download Xray if it is not already installed, use:

./xray.sh -d

Scan a List of URLs

To scan a list of URLs from a file:

./xray.sh -f <file.txt>

Scan a Single URL

To scan a single URL:

./xray.sh -s <url>

Display Help

To display help information:

./xray.sh -h

Output

The scan results will be saved in a file named vuln.txt, and the results will also be displayed in the terminal.

Notes

  • Make sure you have the necessary permissions to execute the script.
  • You might need to run the script with sudo if you encounter permission issues during installation.

License

This project is licensed under the MIT License. See the LICENSE file for details.



Feel free to customize any section based on your preferences or specific details about your project! If you need any further adjustments, just let me know.