oxhunter

  ___       _   _ _   _ _   _ _____ _____ ____  
 / _ \__  _| | | | | | | \ | |_   _| ____|  _ \ 
| | | \ \/ / |_| | | | |  \| | | | |  _| | |_) |
| |_| |>  <|  _  | |_| | |\  | | | | |___|  _ < 
 \___//_/\_\_| |_|\___/|_| \_| |_| |_____|_| \_\
                                            v2.0.6

Advanced Web Vulnerability Scanner — 76+ Files · 2033+ Payloads · AI-Powered

Features · Installation · Commands · AI Setup · Reports · Legal

⚠️ For authorized security testing ONLY. Never scan without written permission.

What's New in v2.0

Feature	v1.0	v2.0
Payloads	379	2033+
Payload Categories	9	20
Live Web Dashboard	❌	✅ Real-time
Mass Scan / ASN Scanner	❌	✅
Nuclei Template Support	❌	✅ 5000+ templates
AI Auto-Exploit Generator	❌	✅ Working PoC
Smart Attack Chaining	❌	✅ SSRF→RCE
OAuth 2.0 / OIDC Tester	❌	✅
Supply Chain Detector	❌	✅ npm/pip
Passive Recon Engine	❌	✅ Shodan+Wayback
Auto Payload Injection	❌	✅
WAF Detect/Bypass Flags	❌	✅
Compliance Flags	❌	✅
Multi-target Support	❌	✅

Features

Core Modules (9)

Module	Payloads
XSS Scanner (Reflected, Stored, DOM)	254
SQL Injection (Error, Blind, Time)	221
CSRF Detection	10
Open Redirect	68
Directory Bruteforce	163
Subdomain Enumeration	127
Header Security Analyzer	—
SSL/TLS Checker	—
CORS Misconfiguration	21

Security Testing (6)

Module	Severity	Payloads
SSRF	CRITICAL	173
XXE Injection	CRITICAL	48
Command Injection	CRITICAL	165
IDOR Detection	HIGH	83
Race Condition	MEDIUM	—
HTTP Request Smuggling	HIGH	16

New Features (8) 🔥

Feature	Description
🖥️ Live Web Dashboard	Real-time scan progress in the browser
🌐 Mass Scan / ASN	Scan IP ranges and company domains
🎯 Nuclei Integration	5000+ community templates
🤖 AI Exploit Generator	Auto-generate working PoC code
⛓️ Smart Attack Chaining	SSRF→RCE, XSS→Account Takeover
🔑 OAuth 2.0 / OIDC	Token leakage, PKCE bypass
📦 Supply Chain Detector	npm/pip typosquatting
🔍 Passive Recon Engine	Shodan + Wayback + Dorks + crt.sh

AI Features (6 — Groq Free)

AI Payload Generator
Smart Vulnerability Chaining
False Positive Reducer
Natural Language Report (English + Urdu)
AI Auto-Exploit Generator ← New
Smart Attack Chain Analysis ← New

Advanced Recon (6)

Module	Description
JS File Analysis	Endpoints, API keys, secrets
GraphQL Testing	Introspection + injection
WebSocket Testing	XSS, SQLi, origin bypass
API Versioning Attack	Deprecated endpoints
Prototype Pollution	JS chain attacks
Business Logic Testing	Price, IDOR, workflow

Integrations (4)

Slack + Discord Alerts
Jira + GitHub Issues
Burp Suite Import/Export
GitHub Actions CI/CD

Compliance (3)

OWASP Top 10 + Score
PCI-DSS v4.0 Report
ISO 27001:2022 Report + Bug Bounty Mode

Payload Count (2033+)

Category	Count	Category	Count
XSS	254	SSTI	87
SQLi	221	WAF Bypass	95
SSRF	173	IDOR	83
CMD Injection	165	Open Redirect	68
Sensitive Files	111	Auth Bypass	74
LFI	139	JWT	61
Common Dirs	163	XXE	48
Subdomains	127	Prototype Poll	55
TOTAL			2033+

Installation

Linux / Kali / macOS

git clone https://github.com/Talha-Imran-cloud/OXHUNTER.git
cd OXHUNTER
pip install -r requirements.txt
playwright install chromium
0xhunter version

Windows (PowerShell)

git clone https://github.com/Talha-Imran-cloud/OXHUNTER.git
cd OXHUNTER
pip install -r requirements.txt
playwright install chromium
0xhunter version

Virtual Environment

python3 -m venv venv
source venv/bin/activate       # Linux/Mac
# venv\Scripts\activate        # Windows
pip install -r requirements.txt
playwright install chromium

Commands

0xhunter --help
0xhunter scan --help
0xhunter version

Basic Scan

# Standard scan — 7 core modules
0xhunter scan https://target.com --confirm

# Full scan — all modules + 2033 payloads
0xhunter scan https://target.com --confirm --full

# Verbose output
0xhunter scan https://target.com --confirm --full --verbose

Reports

0xhunter scan https://target.com --confirm --report html
0xhunter scan https://target.com --confirm --report json
0xhunter scan https://target.com --confirm --report both
0xhunter scan https://target.com --confirm --report html --output myreport.html

Authentication

0xhunter scan https://target.com --confirm --cookie "session=abc123"
0xhunter scan https://target.com --confirm --token "Bearer eyJhbGci..."
0xhunter scan https://target.com --confirm --auth "admin:password"

Proxy

0xhunter scan https://target.com --confirm --proxy http://127.0.0.1:8080

AI Features

# Set API key first
export GROQ_API_KEY="gsk_your_key"           # Linux/Mac
$env:GROQ_API_KEY = "gsk_your_key"           # Windows

0xhunter scan https://target.com --confirm --ai
0xhunter scan https://target.com --confirm --ai --lang en
0xhunter scan https://target.com --confirm --ai --lang ur
0xhunter scan https://target.com --confirm --ai --ai-chain
0xhunter scan https://target.com --confirm --ai --ai-fp
0xhunter scan https://target.com --confirm --full --ai --ai-chain --ai-fp --lang ur

WAF

0xhunter scan https://target.com --confirm --waf-detect
0xhunter scan https://target.com --confirm --waf-bypass
0xhunter scan https://target.com --confirm --waf-detect --waf-bypass

Compliance

0xhunter scan https://target.com --confirm --compliance owasp
0xhunter scan https://target.com --confirm --compliance pci
0xhunter scan https://target.com --confirm --compliance iso
0xhunter scan https://target.com --confirm --bug-bounty --scope "*.target.com"

Notifications

0xhunter scan https://target.com --confirm --notify slack
0xhunter scan https://target.com --confirm --notify discord
0xhunter scan https://target.com --confirm --notify both

Integrations

0xhunter scan https://target.com --confirm --github-issues
0xhunter scan https://target.com --confirm --jira
0xhunter scan https://target.com --confirm --export-burp reports/burp.xml

Scan Control

0xhunter scan https://target.com --confirm --threads 20 --timeout 15 --delay 0.3
0xhunter scan https://target.com --confirm --resume SCAN_ID
0xhunter scan --targets targets.txt --confirm

🆕 New Feature Commands

🖥️ Live Web Dashboard

0xhunter dashboard
0xhunter dashboard --port 9000
# Open: http://127.0.0.1:8787

🌐 Mass Scan / ASN Scanner

0xhunter mass-scan --targets-file targets.txt --confirm
0xhunter mass-scan --cidr 192.168.1.0/24 --confirm
0xhunter mass-scan --targets-file targets.txt --asn AS13335 --confirm
0xhunter mass-scan --targets-file targets.txt --confirm --concurrency 20
0xhunter mass-scan --targets-file targets.txt --confirm --output results.json

🎯 Nuclei Template Support

0xhunter nuclei --targets-file targets.txt --confirm
0xhunter nuclei --targets-file targets.txt --confirm --severity critical,high
0xhunter nuclei --targets-file targets.txt --confirm --templates ./my-templates/
0xhunter nuclei --targets-file targets.txt --confirm --output nuclei_results.json

🔍 Passive Recon Engine

0xhunter scan https://target.com --confirm --passive-recon
0xhunter scan https://target.com --confirm --recon-only
# Saves to: reports/passive_recon.html

🤖 AI Auto-Exploit Generator

0xhunter scan https://target.com --confirm --full --ai --exploit-gen
# Saves to: reports/exploits/

⛓️ Smart Attack Chaining

0xhunter scan https://target.com --confirm --full --chain-attacks
0xhunter scan https://target.com --confirm --full --ai --chain-attacks
# Saves to: reports/attack_chains.html

🔑 OAuth 2.0 / OIDC Tester

0xhunter scan https://target.com --confirm --oauth
0xhunter scan https://target.com --confirm --full --oauth

📦 Supply Chain Attack Detector

0xhunter scan https://target.com --confirm --supply-chain
0xhunter scan https://target.com --confirm --full --supply-chain

Power Commands

# Ultimate scan — all features combined
0xhunter scan https://target.com \
  --confirm --full \
  --ai --ai-chain --ai-fp --lang en \
  --waf-detect --waf-bypass \
  --compliance owasp \
  --passive-recon \
  --exploit-gen --chain-attacks \
  --oauth --supply-chain \
  --notify slack \
  --report html \
  --verbose

# Bug Bounty
0xhunter scan https://target.com \
  --confirm --full --ai \
  --bug-bounty --scope "*.target.com" \
  --chain-attacks --exploit-gen \
  --report html --notify discord

# Red Team
0xhunter scan https://target.com \
  --confirm --full --ai \
  --exploit-gen --chain-attacks \
  --waf-bypass --proxy http://127.0.0.1:8080 \
  --report html

All Flags Reference

Flag	Short	Default	Description
`--confirm`	`-c`	False	Authorization (required)
`--full`	`-f`	False	All modules
`--verbose`	`-v`	False	Verbose output
`--report`	`-r`	None	html/json/both
`--output`	`-o`	auto	Output path
`--cookie`	—	None	Session cookie
`--token`	—	None	Bearer/JWT
`--auth`	—	None	Basic auth
`--proxy`	—	None	Proxy URL
`--ai`	—	False	AI features
`--lang`	—	en	en/ur
`--ai-chain`	—	False	Vuln chaining
`--ai-fp`	—	False	FP reducer
`--waf-detect`	—	False	WAF detect
`--waf-bypass`	—	False	WAF bypass
`--compliance`	—	None	owasp/pci/iso
`--bug-bounty`	—	False	Bug bounty mode
`--scope`	—	None	In-scope domains
`--notify`	—	None	slack/discord/both
`--github-issues`	—	False	GitHub issues
`--jira`	—	False	Jira tickets
`--export-burp`	—	None	Burp XML path
`--threads`	`-t`	10	Threads
`--timeout`	—	10	Timeout (s)
`--delay`	—	0.5	Request delay
`--resume`	—	None	Resume scan ID
`--targets`	—	None	Multi-target file
`--passive-recon`	—	False	Shodan+Wayback+Dorks
`--recon-only`	—	False	Recon only
`--exploit-gen`	—	False	AI PoC generator
`--chain-attacks`	—	False	Attack chaining
`--oauth`	—	False	OAuth/OIDC testing
`--supply-chain`	—	False	Supply chain check

All Commands

Command	Description
`scan`	Web vulnerability scan
`version`	Show version info
`dashboard`	Start live web dashboard
`mass-scan`	Mass scan / ASN scanner
`nuclei`	Nuclei template runner

AI Setup

Go to console.groq.com/keys
Sign up (no credit card required)
Create API Key → copy gsk_xxx

GROQ_API_KEY=gsk_your_key_here   # Add to your .env file

Free Tier: 14,400 req/day · 500K tokens/day ✅

CI/CD

name: OXHUNTER Security Scan
on:
  push:
    branches: [main]
  schedule:
    - cron: '0 2 * * 1'

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v4
        with:
          python-version: '3.11'
      - run: pip install -r requirements.txt && playwright install chromium
      - run: |
          0xhunter scan ${{ secrets.TARGET_URL }} \
            --confirm --full --report json --output results.json
        env:
          GROQ_API_KEY: ${{ secrets.GROQ_API_KEY }}
          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
      - uses: actions/upload-artifact@v3
        with:
          name: security-report
          path: results.json

Reports

reports/
├── report.html           ← Main vulnerability report
├── report.json           ← Raw findings (JSON)
├── passive_recon.html    ← Passive recon results
├── attack_chains.html    ← Attack chain analysis
├── exploits.html         ← AI exploit report
├── burp_export.xml       ← Burp Suite format
├── nl_report_en.txt      ← AI English report
├── nl_report_ur.txt      ← AI Urdu report
└── screenshots/          ← Evidence screenshots
    exploits/
    ├── 01_xss_high.js
    └── 02_sqli_critical.py

Severity Levels

Level	CVSS	Action
🔴 Critical	9.0–10.0	Fix immediately
🟠 High	7.0–8.9	Fix within 24h
🟡 Medium	4.0–6.9	Fix within 7 days
🔵 Low	1.0–3.9	Next sprint
⚪ Info	0.0	Monitor

Troubleshooting

# chardet warning
pip install --upgrade requests urllib3 chardet

# playwright missing
playwright install chromium

# websocket error
pip install websocket-client

# flask missing (dashboard)
pip install flask flask-socketio

# AI not working
echo $GROQ_API_KEY   # must start with gsk_

# Nuclei not found
# Download: https://github.com/projectdiscovery/nuclei/releases

Legal

✅ Authorized penetration testing
✅ Bug bounty (in-scope only)
✅ Security research + education
✅ CTF challenges

❌ Unauthorized scanning
❌ Malicious use
❌ Illegal activity

Author

Talha Imran — SOC Analyst · Web Pentester · Security Researcher

⭐ Star this repo if the tool helped you!

Built for the security community — use responsibly.

Metadata

Release files for oxhunter 2.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for oxhunter 2.1.0
File	Size	Uploaded
oxhunter-2.1.0.tar.gz	235.7 kB	Sep 1, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for oxhunter 2.1.0
File	Interpreter	ABI	Platform	Reset
oxhunter-2.1.0-py3-none-any.whl 279.7 kB Sep 1, 2026	Python 3	none	any	Details

Total release size: 515.4 kB

Release files / oxhunter-2.1.0.tar.gz

Download URL	oxhunter-2.1.0.tar.gz
Size	235.7 kB
Tags	Source
SHA-256 checksum How to use checksums	`71b096c21dc7ba4b494918f290d977cef5183f00196daa0d7eb1a3844ab5fb66`
BLAKE2b-256 checksum How to use checksums	`868f9ff1da5d2be5e38892c38ee08c90a0adffecedcca4f941e384eeefd34c81`
Upload date	Sep 1, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.11.0`

Release files / oxhunter-2.1.0-py3-none-any.whl

Download URL	oxhunter-2.1.0-py3-none-any.whl
Size	279.7 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`c264d3b02299240e668c2094b86befca019590e854a583650c5b027a88e6de00`
BLAKE2b-256 checksum How to use checksums	`f39c6028cd0bb71ffd22090e895ad969c78c2b9b88add960a724d85e19953b69`
Upload date	Sep 1, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.11.0`