Ech0Vulnx - Ech0Vulnx is a powerful multi-purpose network scan

项目说明

Ech0Vulnx

<di="center">
<img src=" alt="Ech0Vulnx Animation" width="600"/>
</div>

<di="center">
<a href=" src=" alt="Stars"></a>
<a href=" src=" alt="Forks"></a>
<a href=" src=" alt="Issues"></a>
<a href=" src=" alt="License"></a>
</div>

<di="center">
<h3>Ad Network Scanner & Assessment Tool</h3>
</div>

Ech0Vulnx is a powerful multi-purpose network scanner and assessment tool built for bug bounty hunters, penetration testers, and security researchers. It supports subdomain enumeration, detection, port scanning, cloud bucket hunting, Ja analysis, and much more!

🚀 Features

<di="center">
<table>
<tr>
<td>
<ul>
<li>Subdomain enumeration & takeo</li>
<li>DNS scanning & WHOIS information</li>
<li>Port scanning with CIDR notation support</li>
<li> scanning (XSS, SQLi, LFI, Open Redirect, etc.)</li>
<li>Ja file analysis & endpoint fuzzing</li>
</ul>
</td>
<td>
<ul>
<li>Directory brute-forcing & parameter fuzzing</li>
<li>AWS S3, Azure, and GCP bucket enumeration</li>
<li>Shodan, Wayback, Nuclei integration</li>
<li>Customizable headers, concurrency, depth options</li>
<li>Auto Recon & multipurpose scans</li>
</ul>
</td>
</tr>
</table>
</div>

📥 Installation

Supported OS:

Step 1: Install System Dependencies

<details>
<summary><b>Debian/Ubuntu/Kali/Parrot</b></summary>

</details>

<details>
<summary><b>Arch Linux</b></summary>

</details>

<details>
<summary><b>macOS</b></summary>

</details>

<details>
<summary><b>Windows</b></summary>

1. Install Python 3.12.9 from python.org.
2. Install Nmap from nmap.org.
3. Optionally, enable WSL for better Linux compatibility.
</details>

Step 2: Clone Repository

Step 3: Run Installation Script

✅ Installation

📖 Usage

<di="center">
<img src=" alt="Usage Example"/>
</div>

Main Options O:

<di="center">
<table>
<tr>
<th>Option</th>
<th>Description</th>
</tr>
<tr>
<td><code>-s</code></td>
<td>Scan subdomains</td>
</tr>
<tr>
<td><code>-d</code></td>
<td>Scan domains for DNS records</td>
</tr>
<tr>
<td><code>-fi</code></td>
<td>Get favicon hashes</td>
</tr>
<tr>
<td><code>-wc</code></td>
<td>Web crawler</td>
</tr>
<tr>
<td><code>-b</code></td>
<td>Broken links check</td>
</tr>
<tr>
<td><code>-co</code></td>
<td>CORS misconfiguration scan</td>
</tr>
<tr>
<td><code>-hh</code></td>
<td>Host header injection scan</td>
</tr>
<tr>
<td><code>-db</code></td>
<td>Directory brute force</td>
</tr>
<tr>
<td><code>-ph</code></td>
<td>Directory tra scan</td>
</tr>
<tr>
<td><code>-sqli</code></td>
<td>SQL Injection scan</td>
</tr>
<tr>
<td><code>-xss</code></td>
<td>XSS scan</td>
</tr>
<tr>
<td><code>-ja</code></td>
<td>Ja file sensitive info scan</td>
</tr>
<tr>
<td><code>--jwt</code></td>
<td>Analyze JWT tokens</td>
</tr>
<tr>
<td><code>--s3-scan</code></td>
<td>AWS S3 bucket enumeration</td>
</tr>
<tr>
<td><code>--cidr</code></td>
<td>CIDR notation port scan</td>
</tr>
<tr>
<td><code>-ar</code></td>
<td>Auto recon</td>
</tr>
</table>
</div>

📌 Examples

<details>
<summary><b>Subdomain Scanning</b></summary>

</details>

<details>
<summary><b>Shodan Integration</b></summary>

</details>

<details>
<summary><b>Ja Analysis</b></summary>

</details>

<details>
<summary><b>DNS Scanning</b></summary>

</details>

<details>
<summary><b>Favicon Analysis</b></summary>

</details>

<details>
<summary><b>Web Crawling</b></summary>

</details>

<details>
<summary><b>Broken Links Check</b></summary>

</details>

<details>
<summary><b>CORS Testing</b></summary>

</details>

<details>
<summary><b>Host Header Injection</b></summary>

</details>

<details>
<summary><b>Directory Brute Force</b></summary>

</details>

<details>
<summary><b>Subnet Scanning</b></summary>

</details>

<details>
<summary><b>Directory Tra</b></summary>

</details>

<details>
<summary><b>SQL Injection</b></summary>

</details>

<details>
<summary><b>XSS Scanning</b></summary>

</details>

<details>
<summary><b>Ja Analysis</b></summary>

</details>

<details>
<summary><b>JWT Analysis</b></summary>

</details>

<details>
<summary><b>AWS S3 Bucket Enumeration</b></summary>

</details>

<details>
<summary><b>Subdomain Takeover</b></summary>

</details>

<details>
<summary><b>Auto Recon</b></summary>

</details>

🌐 Optional Shodan API Key

Register and get your API key at: Shodan.io

📝 License

This project is licensed under the MIT License - see the LICENSE file for details.

🤝 Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

⭐ Support

If you find this tool useful, please consider giving it a ⭐ on GitHub!

<di="center">
<img src=" alt="Ech0Vulnx Footer" width="600"/>
</div>

项目信息

开发语言：Python

Star 数：22

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Ech0Vulnx is a powerful multi-purpose network scanner and vulnerability assessment tool built for bug bounty hunters, penetration testers, and security researchers. It supports subdomain enumeration, vulnerability detection, port scanning, cloud bucket hunting, JavaScript analysis, and much more!展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。