Onyx: One-stop osmosis testor, automatic recognition of micro-intelligence applets, back-compilation analysis, extraction of sensitive information with multi-engine mapping
In the area of infiltration testing and security, the choice of tools often determines the efficiency of work and the quality of results achieved. Today, we present an open source device...OnixIt brings together functions and tools commonly used in infiltration testing, integrates space mapping, gap scanning, mainframe detection, information gathering, micro-intelligence analysis, and provides a one-stop permeation testing workshop to get you off the tools, website trouble!
• Project address
GitHub:I don't know what you're talking about.
Onyx is a set of security tests.Full open source free.Support for Windows, MacOS, Linux multi-platforms is a strong assistant to security researchers and permeators.
Core functional module
Space mapping — three main engine connections
Onyx Integration Fofa, Hunter, Quake Three major cyberspace mapping engines, supporting bulk asset export, provide a quick overview of the target asset.
- Multi-engine joint queries to improve asset detection
- Support bulk export for subsequent analysis
- Visibility shows.
Hole scan — Nuclei engine driven
Based on Nuclei. Engine to support POC management, batch scanning, request package visualization, and one key to generate certified pictures to make the detection of holes more efficient.
- POC Management: Compatible Nuclei template format to support custom POC
- POC Editor: Monaco Editor, supporting syntax highlighting
- AI Help: Support AI generation POC
- Request Replay: Support custom HTTP requests, real time view requests and responses
Micro-intelligence applet analysis — automulgated theories
This is a big highlight of Onyx!Support for automatic recognition, reverse translation, and extraction of sensitive information for micro-intelligent appletsTo make small program security tests simple and efficient.
- AutoScan: Autoscan micro-mail applet
- Applet Invert: Support the inversion and code analysis of .wxapkg documents
- Sensitive information collection: Automatically extract sensitive information from a small program
- Custom Regular: Support custom regular expressions for information matching
4. Auxiliary tools — infiltration testing of Swiss military knives
A variety of practical tools are built in to cover the common scenes of infiltration testing:
- CyberChef: Data conversion and processing
- JWT Key Blast:JWT Token Security Test
- Encoding Conversion: Crossing multiple coding formats
- Fscan, it's working.: Auto parsing and formatting Fscan scan results
- Battery intercept.: retention evidence for batch web-page intercepts
Application of decryption - common application support
Decrypt tool to provide common applications/intermediaries:
- FinalShell, Navicat
- Blue Ling, far away, soft sail.
- Drew, JBoss.
- AK, SK to support public callers, applets, corporate micro-intelligence
Enterprise information — asset linkage analysis
- IP Attribution Query
- ICP Record Information Query
- Business and equity structure analysis:: Access to enterprise information through domain names, equity structure analysis, asset collection and linkage analysis
7. Information detection — comprehensive asset identification
- Port Scan
- Sniper Identification
- Fingerprint recognition
- Sensitive information collectionJS analysis, API extraction
Why do you choose Onyx?
| Advantages | Annotations |
|---|---|
| Zenium One Stop | Combining multiple tools. |
| Zenium Efficient | Automation of scanning and analysis to improve efficiency |
| Zenium Applet | Security tests for micro-intelligence applets |
| Zenium Easy to use. | Graphical interface, simple visualization of operations |
| Zenium Free. | Full open source, free of charge. |
| Zenium Multi-engine | Supporting Fofa, Hunter, Quake, three major mapping engines |
Let's start fast.
Download installation
Visits Releases Page, download the installation package for the corresponding platform:
- Windows: Onyx-win-x64.exe
- MacOS: Onyx-mac-x64.dmg
- Linux: Onix-linux-x64.AppImage
MacOS Special Note
If you cannot open the MacOS user, run the following command:
sudo xattr -d com.apple.quarantine Onyx.appApplication of scenes
- Infiltration test:: Comprehensive asset detection and gap detection
- Security assessmentEnterprise security posture assessment
- Defense drill.: Red team attack and Blue team defense
- The applet is safe.: Micro-Intelligence Applet Security Test
- Information collectionTarget asset information collection and linkage analysis
Summary
Onyx is a powerful set of open-source penetration testing tools for domestic production.One-stop solutions to multiple needs in infiltration testsI don't know. Onyx is capable of both spatial mapping, gap scanning, micro-intelligence applet analysis and enterprise information gathering.
For security researchers, permeators, and participants in the Red and Blue confrontations, Onyx is an invaluable tool. In particular,Auto-replacement and sensitive information extraction function for micro-intelligence appletsThis has filled gaps in domestic tools in this area.
If you're looking for one,Full functionality, simple operation, free open sourceThe osmosis test tool, Onyx, is definitely worth a try!
Onyx: Make infiltration tests simpler, make safety more efficient!