A network OSINT tool that automates subdomain enumeration, service fingerprinting, and data collection via Shodan and ViewDNS APIs.
XRay is a network OSINT (Open Source Intelligence) tool that automates reconnaissance tasks like subdomain enumeration, service fingerprinting, and data collection from public networks. It integrates with Shodan and ViewDNS APIs to gather open ports, historical domain data, and service banners without performing active port scanning. The tool presents all collected information through a web-based interface for security analysis.
Security researchers, penetration testers, and network administrators who need to perform external reconnaissance and mapping of public-facing assets for security assessments or threat intelligence.
Developers choose XRay for its automation capabilities, integration with established OSINT sources like Shodan, and its non-intrusive approach that avoids direct port scanning. It consolidates multiple reconnaissance steps into a single tool with a user-friendly web UI.
XRay is a tool for recon, mapping and OSINT gathering from public networks.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Automates subdomain enumeration via DNS brute-forcing with a customizable wordlist and integrates multiple OSINT steps into a single tool, reducing manual effort for initial info gathering.
Leverages Shodan API to gather open ports and service data without active port scanning, and ViewDNS API for historical domain changes, enhancing data collection from established sources.
Collects banners and metadata from various services like HTTP/HTTPS, MySQL, SMTP, FTP, SSH, POP, and IRC, as detailed in the grabbers section, for thorough service analysis.
Presents all gathered intelligence through an interactive web UI running locally, making data analysis accessible without command-line expertise.
This Go version is explicitly marked as legacy, with the author recommending the Rust-based Legba for new projects, meaning no updates, bug fixes, or new features here.
Relies on external APIs like Shodan and ViewDNS for key functionality; without API keys, it's limited to basic DNS enumeration, and these services may have usage restrictions or costs.
Makes direct connections to target IPs for banner grabbing without built-in proxy support, potentially exposing your IP address and raising legal concerns, as noted in the 'Anonymity and Legal Issues' section.