Ross ROSS = Recommend OSS · open-source software intelligence for agents

chaitin/xray

一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档 observed · 2026-08-28

github.com/chaitin/xray · homepage · Vue · NOASSERTION (other) observed · 2026-08-28

Health v2 · maintenance only

23/100

  • Activity 0
  • Release rhythm 8
  • Longevity 100

Flags: no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 2641
  • days_rel: n/a
  • days_push: 673
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

11720 stars · 1875 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

xray is a security assessment tool from Chaitin that scans web applications for common vulnerabilities like XSS and SQL injection, supporting active crawling, passive proxy scanning, and custom PoC plugins. The core binary is closed-source and distributed as a download; the repository mainly hosts community-contributed PoCs.

Use cases

  • scan a website for xss and sql injection vulnerabilities
  • run a passive vulnerability scanner through an http proxy
  • run custom poc scripts against web targets
  • assess web app security before a pentest
  • crawl a site and automatically detect vulnerabilities
  • scan a single url for common web security issues

When to choose

  • you need a free, powerful web vulnerability scanner with active and passive modes
  • you want community-contributed PoC plugins for emerging vulnerabilities
  • you are a security professional doing authorized web assessments

When to avoid

  • you need fully open-source code you can audit or modify
  • you have not read and agreed to the license terms, which restrict usage
  • you need source-code scanning rather than web application scanning

Facets

cli-tool · maturity active

vulnerability-scanning security penetration-testing web-scraping security penetration-testing web-development cli windows vulnerability-scanner poc xss sqli passive-scanning closed-source-binary linux macos

3 sources

Member repositories

RepositoryRoleHealth v2
chaitin/xraymain23

For agents

markdown · JSON · MCP: product_card(name="chaitin/xray")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem