SleepingBag945/dddd

Health v2 · maintenance only

Adoption not part of the score

1924 stars · 192 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

dddd is a Go-based batch information gathering and supply-chain vulnerability detection CLI tool designed to streamline red team workflows. It automates asset discovery via Hunter, Fofa, and Quake, performs active/passive fingerprinting, subdomain enumeration, and Nuclei-based vulnerability scanning with HTML reporting.

Use cases

• batch collect targets from hunter and fofa
• enumerate subdomains for a domain
• fingerprint web services on an ip range
• scan internal network segment for vulnerabilities
• run nuclei poc scanning with fingerprint-based filtering
• generate html vulnerability report with request responses
• audit logging for authorized pentest engagements

When to choose

• you need an all-in-one red team recon and vuln scanning tool with minimal setup
• you want to pull targets from cyberspace search engines like Hunter, Fofa, or Quake
• you need fingerprint-driven poc scanning to reduce noisy unnecessary requests
• you want audit logs and html reports for compliance-sensitive engagements

When to avoid

• you need a full-featured vulnerability scanner with deep crawling or authenticated testing
• you require a GUI-driven scanning workflow
• you are not operating with explicit legal authorization to test targets
• you need continuous monitoring rather than point-in-time scanning

Facets

cli-tool · maturity active

security vulnerability-scanning web-scraping cli developer-tools security penetration-testing developer-tools cli windows go red-team reconnaissance fingerprinting subdomain-enumeration nuclei fofa hunter attack-surface bug-bounty command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="SleepingBag945/dddd")