Xninjaz - Xninjaz is a powerful and versatile multi-vulnerab

项目说明

Xninjaz

!Xninjaz preview

introduction

Xninjaz is a powerful and multi- scanner designed to detect web application , including Local File Inclusion (LFI), Open Redirects (OR), SQL Injection (SQLi), and Cross-Site Scripting (XSS). This tool was created by Mr.X

Instalations

Features

LFI Scanner: Detect Local File Inclusion .

OR Scanner: Identify Open Redirect .

SQL Scanner: Detect SQL Injection .

XSS Scanner: Identify Cross-Site Scripting .

Multi-threaded scanning: Impro through multi-threading.

Customizable payloads: Adjust payloads to suit specific targets.

Success criteria: Modify success detection criteria for specific use cases.

User-friendly command-line interface: Simple and intuitive.

Sa URLs: Option to save the results of URLs to a file..

Requirements

Python 3.x

webdri==4.0.2

selenium==4.24.0

aiohttp==3.10.5

beautifulsoup4==4.12.3

colorama==0.4.6

rich==12.6.0

requests==2.28.1

Instructions

first: Install tools according to the instructions above

second: Select one of the columns you want to run

third: Enter a custom path or single URL with the that matches the column you selected

last: Tools will automatically search for

Input Information:

Input URL/File: You can provide a single URL or an input file containing a list of URLs to scan.

Payload File: Select or provide a custom payload file for the type of you want to scan for.

Success Criteria:: Define the patterns or strings that indicate a successful exploitation attempt.

Concurrent Threads:: Set the number of threads for multi-threaded scanning.

View and Sa:: Results will be displayed in real-time as the scan progresses.

After the scan completes, you will have the option to save the URLs found to be to a file for future reference.

Customization

Xninjaz allows for levels of customization to fit your specific testing needs:

Custom Payloads:: Create or modify payload files to suit specific types or applications. Payloads should be tailored to the being tested.

Success Criteria:: Adjust the success criteria patterns in the tool to identify successful exploitation attempts more accurately. For example, you can modify the tool to check for specific error messages or unique responses.

Concurrent Threads:: Control the number of concurrent threads used during the scan to optimize performance based on system resources.

Obser

This is a tool for education only, I am not responsible for any misuse

Original Author

<a href=" src=" alt=""/></a>

<<< If you copy , Then Give me The Credits >>>

CONNECT WITH ME :

![Instagram]()
![Instagram]()
![Instagram]()
![Instagram]()
![Instagram]()

If you want to donate, click on the button
<a href=" title="Donate" src="

---

<p align="left">
<img src=" alt="Thanks badge"/>
</p>

---

项目信息

开发语言：Python

Star 数：12

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Xninjaz is a powerful and versatile multi-vulnerability scanner designed to detect various web application vulnerabilities, including Local File Inclusion (LFI), Open Redirects (OR), SQL Injection (SQLi), and Cross-Site Scripting (XSS). This tool was created by Mr.X展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。