coffinxp/loxs has 1,620 GitHub stars and 342 forks. GitHot measured +2 in 7 days. Last checked 2026-11-10 02:09 UTC. Last push 2025-12-07.
best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect
Crecimiento de estrellas medido
- in 24h
- Actualización retrasada
- in 7 days
- +2
- in 15 days
- Actualización retrasada
- in 1 month
- Actualización retrasada
Cambios netos en períodos que se solapan, no totales diarios. Los datos no disponibles se dejan en blanco. Las estrellas indican interés, no calidad.
README.md
Original| Loxs | Multi Vulnerability Scanner | for web application |
|---|---|---|
L |
= |
Local File Inclusion (LFI) |
O |
= |
Open Redirection (OR) |
X |
= |
Cross Site Scripting (XSS) |
S |
= |
Structured Query Language Injection (SQLi) |
Carriage Return Line Feed Injection (CRLF) |
Loxs is an easy-to-use tool that finds web issues like
LFI-OR-SQLi-XSS-CRLF.
Made by-AnonKryptiQuzxCoffinxpxHexShad0wxNahox1hehaqxHghost010!
| Features | About |
|---|---|
LFI Scanner |
Detect Local File Inclusion vulnerabilities. |
OR Scanner |
Identify Open Redirect vulnerabilities. |
SQL Scanner |
Detect SQL Injection vulnerabilities. |
XSS Scanner |
Identify Cross-Site Scripting vulnerabilities. |
CRLF Scanner |
Detect Carriage Return Line Feed Injection vulnerabilities. |
Multi-threaded Scanning |
Improved performance through multi-threading. |
Customizable Payloads |
Adjust payloads to suit specific targets. |
Success Criteria |
Modify success detection criteria for specific use cases. |
User-friendly CLI |
Simple and intuitive command-line interface. |
Save Vulnerable URLs |
Option to save vulnerable URLs to a file for future reference. |
HTML Report Generation |
Generates a detailed HTML report of found vulnerabilities. |
| Language | Packages |
|---|---|
| Python | Python 3.x webdriver_manager selenium aiohttp beautifulsoup4 colorama rich requests gitpython prompt_toolkit pyyaml Flask |
Installation
Clone the repository
git clone https://github.com/coffinxp/loxs.git
cd loxs
Install the requirements
pip3 install -r requirements.txt
Run the Script
python3 loxs.py
| Input Information | |
|---|---|
| Input URL/File | Provide a single URL or an input file containing multiple URLs for scanning. |
| Payload File | Select or provide a custom payload file for the specific type of vulnerability scanning. |
| Success Criteria | Define patterns or strings indicating a successful exploitation attempt. |
| Concurrent Threads | Set the number of threads for multi-threaded scanning. |
| View and Save Results | Display results in real-time during the scan, and save vulnerable URLs for future use. |
| Customization | |
|---|---|
| Custom Payloads | Modify or create payload files for different vulnerability types to target specific apps. |
| Success Criteria | Adjust the tool's success patterns to more accurately detect successful exploitations. |
| Concurrent Threads | Control the number of threads used during the scan for performance optimization. |
Chrome Installation
wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
sudo dpkg -i google-chrome-stable_current_amd64.deb
- If you encounter any errors during installation, use the following command:
sudo apt -f install
sudo dpkg -i google-chrome-stable_current_amd64.deb
Chrome Driver Installation
wget https://storage.googleapis.com/chrome-for-testing-public/128.0.6613.119/linux64/chromedriver-linux64.zip
unzip chromedriver-linux64.zip
cd chromedriver-linux64
sudo mv chromedriver /usr/bin
[!WARNING]
Loxs is intended for educational and ethical hacking purposes only. It should only be used to test systems you own or have explicit permission to test. Unauthorized use of third-party websites or systems without consent is illegal and unethical.
📊 Repository Stats
Explorar proyectos relacionados
Asabeneh/30-Days-Of-Python
El reto de programación 30 Days of Python es una guía paso a paso para aprender el lenguaje de programación Python en 30 días. Este reto puede llevar más de 100 días. Sigue tu propio ritmo. Estos vídeos también pueden ayudarte: https://www.youtube.com/channel/UC7PNRuno1rzYPb1xLa4yktw
78,560 estrellasgrafana/grafana
Plataforma abierta y componible de observabilidad y visualización de datos. Visualiza métricas, registros y trazas de múltiples fuentes, como Prometheus, Loki, Elasticsearch, InfluxDB, Postgres y muchas más.
77,830 estrellasredis/redis
Para los desarrolladores que crean aplicaciones en tiempo real basadas en datos, Redis es la opción preferida, la más rápida y la de más funciones como caché, servidor de estructuras de datos y motor de consultas de documentos y vectores.
77,395 estrellasapache/superset
Apache Superset es una plataforma de visualización y exploración de datos.
75,473 estrellas