Webray RayBox

RayBox (网络安全单兵侦测系统) is an automated penetration testing and security emergency response appliance developed by Webray (盛邦安全), designed for use in offensive security assessments and incident response operations. The system automates the full attack chain workflow across four stages: - Target Reconnaissance: Uses a large fingerprint rule library to identify network asset names, product types, vendors, components, and frameworks, generating asset profiles. - Vulnerability Discovery: Leverages a vulnerability database and continuously updated PoC/EXP plugins from the Daydaypoc community to detect vulnerabilities and weak credentials. - Vulnerability Verification and Exploitation: Supports both fully automated and manual modes for vulnerability verification and exploitation across different use case requirements. - Network Topology Mapping: Uses a combination of active and passive techniques to automatically construct network topologies and correlate reconnaissance, vulnerability, and exploitation results into a network attack posture topology. Target asset types include critical information infrastructure, industrial control systems (ICS), IoT devices, web applications, and business systems. The system evaluates network security posture across dimensions including asset exposure surface, vulnerability severity, exploitability, and impact scope. It is intended to help organizations prioritize vulnerability remediation and emergency response decisions. Application scenarios include: - Security inspections for critical infrastructure, pre-event security self-checks, and routine regulatory compliance checks. - Red/blue team exercises where defenders use the tool to rapidly identify and reduce their own exposure surface, and conduct host-level emergency response using event investigation and custom PoC capabilities.