oxide::vulnerability::scanner

OXIDE Vulnerability Scanner v8.7.2 — A Rust-powered security scanner with AI/ML anomaly detection, advanced reconnaissance, intelligent fuzzing, and vulnerability discovery.

---

---

OXIDE is a weapon-grade security tool. In the wrong hands, its capabilities cause severe disruption. You are solely responsible for how you use it.

• DO NOT scan systems you do not own or lack written authorization to test.
• DO NOT use for illegal access, data theft, or system damage.
• DO NOT extract or reimplement its detection logic in malicious software.
• DO use for authorized penetration testing, CTFs, labs, and security research.

Violators assume full legal liability. HSOL bears no responsibility for misuse.

---

v8.7.2 — Hardened production release. Burp Suite integration, module isolation, embedded TLS cert, zero dead code, zero silent errors, async-safe mutexes, full --silent-mode, full --duration, and 50+ fixes across the codebase.

Every star brings OXIDE closer to sudo apt install oxide. Built for Kali, tested on Kali — destined for the official Kali Linux repositories.

---

sudo apt install -y build-essential pkg-config libssl-dev cmake
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
source "$HOME/.cargo/env"
MY REPO URL
cargo build --release
sudo cp target/release/oxide /usr/local/bin/

---

Module	Detection	Module	Detection
SQLi ⭐	Error, boolean, time, UNION, stacked	Blind SQLi	Blind / time-based
XSS ⭐	Reflected, stored, DOM	LFI ⭐	File read confirmation
CMDi	Linux + Windows	CORS	Misconfiguration audit
TLS	Certs, protocols, ciphers	Common App	Nikto-style path probing
Default Creds	Known admin creds	DB Fingerprint	MySQL, PG, MSSQL, Oracle, SQLite
Content Filter	Keys, tokens, secrets	Agent	Deep AI-driven anomaly scan
Fuzz ⭐	6000+ payload injection	SSTI ⭐	Template injection (Jinja2/Freemarker/Velocity)

Nosql Injection Still in development needs wiring

⭐ = Default modules (runs without --modules flag)

---

Pipeline: Crawl → ML Analysis + Auto-Exploit → Fuzz → HPP Detection → Report

Proof of code (from src/zero_day/classifier.rs):

// Feature Extraction — custom 30-dim response vectors (features.rs:52)
pub struct ResponseFeatures {
    pub body_length: usize,
    pub entropy: f64,
    pub has_sql_error: bool,
    pub security_header_count: usize,
    pub status_code: u16,
    pub is_error_status: bool,
    // ... 30 fields total
}

// Random Forest — smartcore (classifier.rs:151)
RandomForestClassifier::fit(&x_train, &y_train, Default::default())

// SVM — smartcore RBF kernel (classifier.rs:312)
SVC::fit(x, &y_svm, &SVCParameters::default().with_c(100.0).with_kernel(Kernels::rbf()))

// Baseline Profiling — statistical (classifier.rs:334)
// Posterior odds = prior_odds × LR₁ × LR₂ × ...
// Prior: ~10% endpoints vulnerable → prior_odds = 0.111
// SQL error string LR: 15, Stack trace LR: 8, High entropy+error LR: 1.8

Auto-exploit: SQLi · XSS · LFI · CMDi · SSTI · WAF Bypass (12 vendors)

---

Session & Auth — Cookie, Bearer, Basic, API Key, JWT, OAuth2 · Hijack testing JS Crawling — Headless Chrome · SPA routes · JS URL extraction API Fuzzer — REST + GraphQL · 7 methods · 6 content types WebSocket — SQLi, XSS, CMDi, path traversal, JSON injection, Recon — TCP fingerprinting · OS detection · Banner grabbing · DNS · WHOIS

---

A Frameless Native desktop GUI built with **WRY** (WebView2/WebKit) + **TAO** (windowing). Frameless window, scan presets, config panel, module toggles, live terminal console, status badge, About modal. Keyboard shortcuts: `Ctrl+Enter` start, `Escape` stop, `F12` DevTools.

cd gui && cargo build --release && sudo cp target/release/oxide-gui /usr/local/bin/ && oxide-gui

---

Flag	Default	Purpose	Flag	Default	Purpose
--url	required	Target(s) or file	--modules	sqli,xss,lfi,fuzz,ssti	all or comma-sep
--burp	false	Route via Burp 127.0.0.1:8080	--multiattack	false	Multi-target
--zeroday	false	ML anomaly mode	--headless	false	Chrome JS
--threads	5	Concurrent workers	--duration	0	Scan time limit (seconds)
--active	false	TCP fingerprinting	--exploitation-level	25	Aggression (1–100)
--silent-mode	false	Quiet output	--insecure	false	Skip TLS verify
--session	false	Session hijack	--train	false	Train ML
--list-modules	—	Show all modules	--payload-limit	100	Max URLs per module

Config: oxide-config.toml for persistent settings.

---

Format	Use Case
HTML	Human review
JSON	Machine-parsable — automation / pipelines
CSV	Spreadsheet-ready — data analysis
XML	Standard schema — tool integration

Auto-saved to reports/oxide_<timestamp>.*

---

v8.7.2 — Unified Engine Update

Core Updates

• Unified concurrent fuzzing engine across selected modules.
• Adaptive module selection with live progress, request counts and ETA.
• SSTI detection with baseline false-positive protection.
• Parameter mining for parameterless URLs.
• SQLi pipeline: detect → confirm → identify.
• AI-assisted payload mutation and response anomaly analysis.
• Bayesian confidence scoring and Levenshtein-based response analysis.
• Burp Suite proxy integration with embedded CA support.
• Production hardening with 50+ fixes.

Detection Stack

Core: SQLi · Blind SQLi · XSS · LFI · SSTI · CMDi · CORS · TLS · WAF · DB Fingerprinting

Advanced: API Fuzzer · JS Crawler · WebSocket · Cache · Session · Rate Limiter · ML Detector · Evasion · Cluster

Unified Fuzzing

• One concurrent architecture for module selections.
• AI-assisted mutation and context-aware payload selection.
• Exploitation levels control testing depth and destructive checks.
• 6000+ technology-aware paths and injection templates.
• REST/GraphQL API fuzzing support.

ML confidence is a prediction, not proof of exploitability. Findings should be validated against actual request/response evidence.

OXIDE ships native binaries for every offensive workstation — desktop to pocket.

Android (build-android.sh)

ABI	Binary	Use
arm64-v8a	oxide-android-builds/arm64-v8a/oxide	Modern phones / Termux proot
armeabi-v7a	oxide-android-builds/armeabi-v7a/oxide	Older 32-bit devices
x86_64	oxide-android-builds/x86_64/oxide	Android emulators / Chromebooks

./build-android.sh                      # auto-detects NDK, builds all ABIs
# Termux direct: copy the arm64 binary into $PREFIX/bin and chmod +x

Windows (MinGW cross-compile from Linux)

sudo apt install mingw-w64
cargo build --release --target x86_64-pc-windows-gnu
# → target/x86_64-pc-windows-gnu/release/oxide.exe

See CROSS-COMPILE.md for the full matrix (NDK versions, LTO profiles, troubleshooting).

Low-RAM build note: on machines with <8GB RAM use CARGO_PROFILE_RELEASE_LTO=thin CARGO_PROFILE_RELEASE_CODEGEN_UNITS=16 cargo build --release

---

cargo clean && cargo build --release

---

Targeting official Kali Linux repository: sudo apt update && sudo apt install oxide

Step	Status
Debian/Arch packaging	✓ Complete
Live progress board	✓ Complete
pnet raw socket support	✓ Complete
Battle Tested	Uses Levenshtein · Burp Integration · Module Isolation