Download
XRAY is a modular security toolset that helps developers and security professionals analyze, fuzz, and test web applications, protocols, and network services for vulnerabilities. It provides a framework for writing and executing inspection modules that can parse structured data (JSON, XML, HTML), traverse graphs of endpoints, and perform intelligent probing guided by discovered surface area. XRay is typically used as a reconnaissance and vulnerability discovery engine in red-team or app-security workflows: it leverages extensible plugins to adapt to different protocols, inject payloads, and detect common bug classes such as injection flaws, misconfigurations, and unsafe endpoints. The modular architecture means users can customize or extend the engine with new analyzers, fuzzers, or output formats tailored to specific testing environments. Rather than being a “one-size-fits-all” black box scanner, XRAY encourages interactive exploration and integrates with other tooling.
Features
- Modular security-testing framework with plugin support
- Intelligent analysis and fuzzing of web and network protocols
- Extensible modules for parsing structured formats (JSON, HTML, XML)
- Endpoint traversal and surface discovery for reconnaissance workflows
- Customizable inspection scripts with flexible output options
- Integrates with other security tools in audit or red-team pipelines
Project Samples
