zan8in/afrog

Health v2 · maintenance only

Adoption not part of the score

4372 stars · 477 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

afrog is an open-source security tool written in Go for vulnerability scanning using PoC (Proof of Concept) rules. It is designed for bug bounty hunters, penetration testers, and red teamers to detect known vulnerabilities in targets.

Use cases

• scan a target for known vulnerabilities with PoC rules
• find exploitable CVEs during a pentest
• run batch vulnerability scans for bug bounty recon
• write custom PoC rules for vulnerability detection
• verify whether a service is affected by a specific exploit

When to choose

• you need a fast CLI-based PoC vulnerability scanner
• you do bug bounty, pentest, or red team engagements and want community PoCs
• you want to write and run custom PoC rules in a simple format

When to avoid

• you need a full authenticated web application scanner
• you want a GUI-driven enterprise vulnerability management platform
• you need continuous compliance or asset inventory scanning rather than PoC-based checks

Facets

cli-tool · maturity active

vulnerability-scanning security penetration-testing cli security penetration-testing windows cli cross-platform poc-scanner bug-bounty red-teaming vulnerability-scanner go linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="zan8in/afrog")