https://github.com/coffinxp/loxs
best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect
https://github.com/coffinxp/loxs
Last synced: about 1 month ago
JSON representation
best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect
- Host: GitHub
- URL: https://github.com/coffinxp/loxs
- Owner: coffinxp
- License: bsd-3-clause
- Created: 2024-09-13T06:44:56.000Z (7 months ago)
- Default Branch: main
- Last Pushed: 2025-03-02T11:05:01.000Z (about 1 month ago)
- Last Synced: 2025-03-02T12:19:13.608Z (about 1 month ago)
- Language: Python
- Homepage:
- Size: 392 KB
- Stars: 1,022
- Watchers: 19
- Forks: 232
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- WebHackersWeapons - LOXS - redirect`](/categorize/tags/open-redirect.md)|[](/categorize/langs/Python.md)| (Weapons / Tools)
README
|Loxs|Multi Vulnerability Scanner|for web application|
|----------------|--------------|-------------|
| `L`| `=`| `Local File Inclusion (LFI)`|
| `O`| `=`| `Open Redirection (OR)`|
| `X`| `=`| `Cross Site Scripting (XSS)`|
| `S`| `=`| `Structured Query Language Injection (SQLi)`|
| | | `Carriage Return Line Feed Injection (CRLF)`|
> **Loxs** is an easy-to-use tool that finds web issues like `LFI` - `OR` - `SQLi` - `XSS` - `CRLF`.
*`Made by`* - [`AnonKryptiQuz`](https://github.com/AnonKryptiQuz) x [`Coffinxp`](https://github.com/coffinxp) x [`HexShad0w`](https://github.com/HexShad0w) x [`Naho`](https://github.com/Naho666) x [`1hehaq`](https://github.com/1hehaq)!
| Features | About |
|-----------------------------------|-----------------------------------------------------------------------------|
| `LFI Scanner` | Detect Local File Inclusion vulnerabilities. |
| `OR Scanner` | Identify Open Redirect vulnerabilities. |
| `SQL Scanner` | Detect SQL Injection vulnerabilities. |
| `XSS Scanner` | Identify Cross-Site Scripting vulnerabilities. |
| `CRLF Scanner` | Detect Carriage Return Line Feed Injection vulnerabilities. |
| `Multi-threaded Scanning` | Improved performance through multi-threading. |
| `Customizable Payloads` | Adjust payloads to suit specific targets. |
| `Success Criteria` | Modify success detection criteria for specific use cases. |
| `User-friendly CLI` | Simple and intuitive command-line interface. |
| `Save Vulnerable URLs` | Option to save vulnerable URLs to a file for future reference. |
| `HTML Report Generation` | Generates a detailed HTML report of found vulnerabilities. |
| Language | Packages |
|-----------------------------------|-----------------------------------------------------------------------------|
| ***Python***| `Python 3.x` `webdriver_manager` `selenium` `aiohttp` `beautifulsoup4` `colorama` `rich` `requests` `gitpython` `prompt_toolkit` `pyyaml` `Flask`|
## Installation
### Clone the repository
```bash
git clone https://github.com/coffinxp/loxs.git
```
```bash
cd loxs
```
### Install the requirements
```bash
pip3 install -r requirements.txt
```
### Run the Script
```bash
python3 loxs.py
```
----
| Input Information | |
|---------------------------|-----------------------------------------------------------------------------------------|
| Input URL/File | Provide a single URL or an input file containing multiple URLs for scanning. |
| Payload File | Select or provide a custom payload file for the specific type of vulnerability scanning.|
| Success Criteria | Define patterns or strings indicating a successful exploitation attempt. |
| Concurrent Threads | Set the number of threads for multi-threaded scanning. |
| View and Save Results | Display results in real-time during the scan, and save vulnerable URLs for future use. |
----
| Customization | |
|----------------------------|------------------------------------------------------------------------------------------|
| Custom Payloads | Modify or create payload files for different vulnerability types to target specific apps.|
| Success Criteria | Adjust the tool's success patterns to more accurately detect successful exploitations. |
| Concurrent Threads | Control the number of threads used during the scan for performance optimization. |
----
### Chrome Installation
```bash
wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
```
```bash
sudo dpkg -i google-chrome-stable_current_amd64.deb
```
- If you encounter any errors during installation, use the following command:
```bash
sudo apt -f install
```
```bash
sudo dpkg -i google-chrome-stable_current_amd64.deb
```
----
### Chrome Driver Installation
```bash
wget https://storage.googleapis.com/chrome-for-testing-public/128.0.6613.119/linux64/chromedriver-linux64.zip
```
```bash
unzip chromedriver-linux64.zip
```
```bash
cd chromedriver-linux64
```
```bash
sudo mv chromedriver /usr/bin
```
> [!WARNING]
> Loxs is intended for educational and ethical hacking purposes only. It should only be used to test systems you own or have explicit permission to test. Unauthorized use of third-party websites or systems without consent is illegal and unethical.
