m-sec-org/EZ
EZ是一款集信息收集、端口扫描、服务暴破、URL爬虫、指纹识别、被动扫描为一体的跨平台漏洞扫描器。 observed · 2026-08-28
Health v2 · maintenance only
24/100
- Activity 2
- Release rhythm 28
- Longevity 69
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: 56.0
- age_days: 978
- days_rel: 593
- days_push: 593
- n_releases_24m: 3
Adoption not part of the score
1078 stars · 40 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
EZ is a cross-platform vulnerability scanner that combines information gathering, port scanning, service brute-forcing, URL crawling, fingerprinting, and passive/active web scanning in a single CLI tool. It detects common web vulnerabilities like SQL injection, XSS, XXE, and SSRF, plus known CVEs in components like Shiro, Struts2, and various OA/VPN systems. Note: binaries are free to download but the source is not open and a monthly community license certificate is required.
Use cases
- scan a website for sql injection and xss vulnerabilities
- enumerate subdomains and gather information about a target domain
- brute force credentials on exposed services
- fingerprint web frameworks and detect known component cves
- crawl a web app and passively scan traffic for vulnerabilities
- run a poc scan against shiro or struts2 targets
- perimeter reconnaissance before a penetration test
When to choose
- you need an all-in-one external perimeter scanner for pentest engagements
- you want built-in poc coverage for common Chinese enterprise software (OA, VPN) and Java components
- you prefer a single cross-platform binary over assembling multiple tools
When to avoid
- you require open-source code you can audit or modify (source is closed)
- you cannot or will not register with the M-SEC community and renew a monthly license certificate
- you need a fully automated continuous scanning pipeline rather than an operator-driven pentest tool
Facets
cli-tool · maturity active
vulnerability-scanning penetration-testing web-scraping search-engine security security penetration-testing web-development developer-tools windows cli cross-platform vulnerability-scanner port-scanner fingerprinting poc-scanning crawler brute-force closed-source-binary license-required linux macos
1 source
- readme: https://github.com/m-sec-org/EZ · fetched 2026-08-28 · 2c1163a3dfcd
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| m-sec-org/EZ | main | 24 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem