EdgeSecurityTeam/EHole

Health v2 · maintenance only

Adoption not part of the score

3511 stars · 418 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

EHole (棱洞) is a Go-based fingerprint identification tool for red team reconnaissance that pinpoints high-value, easily attackable systems (OA, VPN, Weblogic, etc.) from large asset lists or C-segment IP ranges. It supports local URL file scanning and FOFA API-based batch asset discovery, with keyword, faviconhash, and regex fingerprint rules and JSON output.

Use cases

• identify CMS fingerprints from a list of urls
• find vulnerable systems in a c-class ip range
• bulk extract assets from fofa by ip range
• export fingerprint scan results to json
• detect which web apps run on target servers during recon
• prioritize attack surface during red team engagement

When to choose

• you need fast fingerprinting of many urls or an ip range during red team recon
• you already have a FOFA account and want API-driven asset discovery
• you want customizable fingerprint rules via keyword, favicon hash, or regex

When to avoid

• you need a full vulnerability scanner rather than fingerprint identification
• you want passive or agentless scanning without FOFA keys or direct url access
• you need ongoing scheduled monitoring rather than one-off scans

Facets

cli-tool · maturity maintenance

osint web-scraping security cli security penetration-testing developer-tools cli windows go fingerprinting red-team reconnaissance cms-detection fofa linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="EdgeSecurityTeam/EHole")