Moham3dRiahi/XAttacker

Perl

alternative to Burp Suite

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

vulnerability-scannervulnerability-detectionvulnerability-exploitvulnerability-assessmentsecurity-scannerscannersecurity-toolswebsite-vulnerability-scannerhackinghacking-toolpentestwp-scanner
Star Growth
Stars
1.8k
Forks
467
Weekly Growth
+0
Issues
0
5001k1.5k
Nov 2017Oct 2020Sep 2023Sep 2026
README

XAttacker V2.5 Tool FREE

XATTACKER A Massive Exploiting Tool capable of scanning and auto-exploiting vulnerabilities in web applications, By providing a target website to the tool, it auto detects its’ architecture if using a Content Management Service (CMS) and tries to find vulnerabilities based on the detected CMS, After finding the vulnerabilities the tool will generate an exploit for the website and send the user the link of the exploit.



XAttacker V2.5 Tool FREE

              Exploits ListUsageTutorial

USAGE

Short Form Long Form Description
-l --list WebSites List

Example

if you have list websites run tool with this command line

perl XAttacker.pl -l list.txt


Main Features

  • Vulnerability Scanner
  • Auto-Exploiting
  • Content Management System Attacker
  • Dork Search with more 1 Search Engine
  • Reporting (Plain text)

Information

This Tool Is For Educational Purpose Only, Usage Of XATTACKER For Attacking Targets Without Prior Mutual Consent Is Illegal. Developers Assume No Liability And Are Not Responsible For Any Misuse Or Damage Cause By This Program.

SYSTEMS Vulnerability List :

wordpress - Adblock Blocker
- WP All Import
- Blaze
- Catpro
- Cherry Plugin
- Download Manager
- Formcraft
- levoslideshow
- Power Zoomer
- Gravity Forms
- Revslider Upload Shell
- Revslider Dafece Ajax
- Revslider Get Config
- Showbiz
- Simple Ads Manager
- Slide Show Pro
- WP Mobile Detector
- Wysija
- InBoundio Marketing
- dzs-zoomsounds
- Reflex Gallery
- Creative Contact Form
- Work The Flow File Upload
- WP Job Manger
- PHP Event Calendar
- Synoptic
- Wp Shop
- Content Injection
- Cubed Theme
- Rightnow Theme
- Konzept
- Omni Secure Files
- Pitchprint
- Satoshi
- Pinboard
- Barclaycart
Joomla - Com Jce
- Com Media
- Com Jdownloads
- Com Fabrik
- Com Jdownloads Index
- Com Foxcontact
- Com Ads Manager
- Com Blog
- Com Users
- Com Weblinks
- mod_simplefileupload
- Com Facileforms
- Com Jwallpapers
- Com Extplorer
- Com Rokdownloads
- Com Sexycontactform
- Com Jbcatalog
Prestashop - columnadverts
- soopamobile
- soopabanners
- Vtermslideshow
- simpleslideshow
- productpageadverts
- homepageadvertise
- homepageadvertise2
- jro_homepageadvertise
- attributewizardpro
- 1attributewizardpro
- AttributewizardproOLD
- attributewizardpro_x
- advancedslider
- cartabandonmentpro
- cartabandonmentproOld
- videostab
- wg24themeadministration
- fieldvmegamenu
- wdoptionpanel
- pk_flexmenu
- pk_vertflexmenu
- nvn_export_orders
- megamenu
- tdpsthemeoptionpanel
- psmodthemeoptionpanel
- masseditproduct
- blocktestimonial
Drupal - Add Admin
- Drupalgeddon
Lokomedia - SQL injection

Video


Installation Linux alt tag

git clone https://github.com/Moham3dRiahi/XAttacker.git
cd XAttacker
perl XAttacker.pl

Installation Android alt tag

Download Termux

git clone https://github.com/Moham3dRiahi/XAttacker.git
cd XAttacker
chmod +x termux-install.sh
bash termux-install.sh

Follow This Video Psyco Tutorials

Installation Windows alt tag

Download Perl
Download XAttacker
Extract XAttacker into Desktop
Open CMD and type the following commands:
cd Desktop/XAttacker-master/
perl XAttacker.pl

Donations

Found XATTACKER cool? just drop a THANK YOU this will motivate me to create more exciting stuffs for you


📧 Contact


SCAN OR CLICK ON THE IMAGE


Related repositories
projectdiscovery/nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

GoGo ModulescliMIT Licensecve-scannersubdomain-takeover
docs.projectdiscovery.io/tools/nuclei
31.1k3.9k
future-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

GoGo ModulescliGNU General Public License v3.0vulsvulnerability-scanners
vuls.io
12.3k1.2k
chaitin/xray

一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

VueOthersecurityvulnerability
docs.xray.cool
11.7k1.9k
google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

GoGo ModulescliApache License 2.0scannersecurity-audit
google.github.io/osv-scanner/
11k789
lintsinghua/DeepAudit

DeepAudit:人人拥有的 AI 黑客战队,让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行,自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ,一键生成报告。支持中转站。​让安全不再昂贵,让审计不再复杂。

PythonPyPIGNU Affero General Public License v3.0aibug-detection
7k847
commixproject/commix

Automated exploitation of command injection vulnerabilities. From detection to full control of the underlying operating system.

PythonPyPIcliOtherpythoncommand-injection
commixproject.com
5.8k940
OWASP/Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

PythonPyPIApache License 2.0pythonpenetration-testing
owasp.org/nettacker
5.6k1.2k
Awarexone/Agentic-Bug-Hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

PythonPyPIMIT Licenseai-securitybug-bounty
awarexone.com
4.7k835
zan8in/afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

HTMLMIT Licensevulnerability-scannerpoc
4.4k477
evyatarmeged/Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

PythonPyPIcliMIT Licensereconnaissancescanner
4k503
e-m-b-a/emba

EMBA - The firmware security analyzer

ShellGNU General Public License v3.0firmwarelinux
securefirmware.de
3.7k321
vulnersCom/nmap-vulners

Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.

LuaOthercpecve
vulners.com
3.5k565