A tool for network OSINT gathering
XRay is a tool for network OSINT gathering, its goal is to make
some of the initial tasks of information gathering and network
mapping automatic.
XRay is a very simple tool, it works this way:
* It'll bruteforce subdomains using a wordlist and DNS requests.
* For every subdomain/ip found, it'll use Shodan to gather open
ports and other intel.
* If a ViewDNS API key is provided, for every subdomain
historical data will be collected.
* For every unique ip address, and for every open port, it'll
launch specific banner grabbers and info collectors.
* Eventually the data is presented to the user on the web ui.
Grabbers and Collectors
* HTTP Server, X-Powered-By and Location headers.
* HTTP and HTTPS robots.txt disallowed entries.
* HTTPS certificates chain ( with recursive subdomain grabbing
from CN and Alt Names ).
* HTML title tag.
* DNS version.bind. and hostname.bind. records.
* MySQL, SMTP, FTP, SSH, POP and IRC banners.
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout home:mnhauke/xray && cd $_ - Create Badge
Source Files
| Filename | Size | Changed |
|---|---|---|
| _service | 0000000618 618 Bytes | |
| _servicedata | 0000000236 236 Bytes | |
| vendor.tar.gz | 0003645834 3.48 MB | |
| xray-0~git20220827.tar.xz | 0001695832 1.62 MB | |
| xray.changes | 0000000169 169 Bytes | |
| xray.spec | 0000002425 2.37 KB |
Comments 0