Chaitin/xray1.8.5-1.9最新社区高级版 包含429POC 附license
作者：FancyPig | 发布时间： | 更新时间：
相关阅读
data-postsbox="{"id":8932,"title":"Chaitin/xray1.8.4最新社区高级版 包含358POC 附license","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2022/01/20220130095904364.png","cover_video":"","views":10575,"comment_count":22,"category":"software","is_forum_post":false}">{"id":8932,"title":"Chaitin/xray1.8.4最新社区高级版 包含358POC 附license","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2022/01/20220130095904364.png","cover_video":"","views":10575,"comment_count":22,"category":"software","is_forum_post":false}
data-postsbox="{"id":6012,"title":"Chaitin/Xray 1.8.2最新破解版 包含343POC","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":7531,"comment_count":505,"category":"software","is_forum_post":false}">{"id":6012,"title":"Chaitin/Xray 1.8.2最新破解版 包含343POC","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":7531,"comment_count":505,"category":"software","is_forum_post":false}
data-postsbox="{"id":3738,"title":"xray1.7.1 pro破解版下载 使用方法","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":3837,"comment_count":4,"category":"software","is_forum_post":false}">{"id":3738,"title":"xray1.7.1 pro破解版下载 使用方法","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":3837,"comment_count":4,"category":"software","is_forum_post":false}
必读说明
很多人反馈打开的时候会出现闪退，因此我们这里需要以管理员身份运行cmd
然后进入到下载好的文件路径，然后运行
"xray v1.8.5 x64.exe"后面跟对应的参数，详细的玩法您可以看下面的常见玩法介绍
功能介绍
1.8.5版本比1.8.4版本增加了71个新的POC
社区高级版比社区版增加
- 子域名扫描功能
- 部分专项漏洞检测
更新日志
暂无，等官方说明
工具下载
解压密码
www.pigsec.cn常见玩法
被动扫描
相关命令
与AWVS联动相关命令
xray v1.8.5 x64.exe webscan --listen 127.0.0.1:7777 --html-output proxy.htmlAWVS工具
data-postsbox="{"id":5708,"title":"最新Acunetix14.6.211215172破解版 支持Log4j检测","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":7169,"comment_count":8,"category":"software","is_forum_post":false}">{"id":5708,"title":"最新Acunetix14.6.211215172破解版 支持Log4j检测","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":7169,"comment_count":8,"category":"software","is_forum_post":false}
其他玩法
- 使用基本爬虫对爬虫爬取的链接进行爬取和扫描，寻找
http://example.com网站的漏洞，并输出到vuln.html
xray v1.8.5 x64.exe webscan --basic-crawler http://example.com --html-output vuln.html- 只扫描单个 URL，不使用爬虫
xray v1.8.5 x64.exe webscan --url http://example.com/ ? a=b --html-output single-url.html- 手动指定此运行的插件。默认情况下，将启用所有内置插件。您可以使用以下命令指定为此扫描启用哪些插件。
xray v1.8.5 x64.exe webscan --plugins cmd-injection,sqldet --url http://example.com"xRay Web Vulnerability Scanner Advanced v1.8.2 x64.exe" webscan --plugins cmd-injection,sqldet --listen 127.0.0.1:7777- 指定插件输出，可以指定将本次扫描的漏洞信息输出到文件中
xray v1.8.5 x64.exe webscan --url http://example.com/ ? a=b \--text-output result.txt --json-output result.json --html-output report.html结语
本文仅供学习研究，如果商业使用建议使用正版，当然如果可以赞助一下xray的相关团队或者参与poc插件提交也会更好改善国内的技术环境