README.md

December 7, 2025 ยท View on GitHub




LoxsMulti Vulnerability Scannerfor web application
L=Local File Inclusion (LFI)
O=Open Redirection (OR)
X=Cross Site Scripting (XSS)
S=Structured Query Language Injection (SQLi)
Carriage Return Line Feed Injection (CRLF)

Loxs is an easy-to-use tool that finds web issues like LFI - OR - SQLi - XSS - CRLF.

Made by - AnonKryptiQuz x Coffinxp x HexShad0w x Naho x 1hehaq x Hghost010!





FeaturesAbout
LFI ScannerDetect Local File Inclusion vulnerabilities.
OR ScannerIdentify Open Redirect vulnerabilities.
SQL ScannerDetect SQL Injection vulnerabilities.
XSS ScannerIdentify Cross-Site Scripting vulnerabilities.
CRLF ScannerDetect Carriage Return Line Feed Injection vulnerabilities.
Multi-threaded ScanningImproved performance through multi-threading.
Customizable PayloadsAdjust payloads to suit specific targets.
Success CriteriaModify success detection criteria for specific use cases.
User-friendly CLISimple and intuitive command-line interface.
Save Vulnerable URLsOption to save vulnerable URLs to a file for future reference.
HTML Report GenerationGenerates a detailed HTML report of found vulnerabilities.




LanguagePackages
PythonPython 3.x webdriver_manager selenium aiohttp beautifulsoup4 colorama rich requests gitpython prompt_toolkit pyyaml Flask



Installation

Clone the repository

git clone https://github.com/coffinxp/loxs.git
cd loxs

Install the requirements

pip3 install -r requirements.txt

Run the Script

python3 loxs.py

Input Information
Input URL/FileProvide a single URL or an input file containing multiple URLs for scanning.
Payload FileSelect or provide a custom payload file for the specific type of vulnerability scanning.
Success CriteriaDefine patterns or strings indicating a successful exploitation attempt.
Concurrent ThreadsSet the number of threads for multi-threaded scanning.
View and Save ResultsDisplay results in real-time during the scan, and save vulnerable URLs for future use.

Customization
Custom PayloadsModify or create payload files for different vulnerability types to target specific apps.
Success CriteriaAdjust the tool's success patterns to more accurately detect successful exploitations.
Concurrent ThreadsControl the number of threads used during the scan for performance optimization.

Chrome Installation

wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
sudo dpkg -i google-chrome-stable_current_amd64.deb
  • If you encounter any errors during installation, use the following command:
sudo apt -f install
sudo dpkg -i google-chrome-stable_current_amd64.deb

Chrome Driver Installation

wget https://storage.googleapis.com/chrome-for-testing-public/128.0.6613.119/linux64/chromedriver-linux64.zip
unzip chromedriver-linux64.zip
cd chromedriver-linux64 
sudo mv chromedriver /usr/bin

Warning


Loxs is intended for educational and ethical hacking purposes only. It should only be used to test systems you own or have explicit permission to test. Unauthorized use of third-party websites or systems without consent is illegal and unethical.

๐Ÿ“Š Repository Stats

License Python GitHub repo size GitHub last commit GitHub Stars GitHub issues