# chainreactors/gogo

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

Repository: https://github.com/chainreactors/gogo
Canonical: https://ross.abutalabs.com/products/gogo
Homepage: https://chainreactors.github.io/wiki/gogo/
Language: Go
License: GPL-3.0
License Family: copyleft
Topics: security-tools, recon, redteam, security
Last push: 2026-07-28T07:19:34+00:00

## Health v2 (maintenance only)
Score: 91/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 94, release rhythm 81, longevity 100
- inputs: {"age_days": 1539, "days_push": 36, "days_rel": 50, "gap_med": 58, "n_releases_24m": 8}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2118, forks 200 (observed 2026-08-28T04:06:16.375086+00:00)

## What it is
gogo is a high-performance, highly configurable automated scanning engine written in pure Go for red team operations. It combines port scanning, active/passive service fingerprinting, key information extraction, and harmless nuclei-based PoC checks with minimal packet emission and extensive DSL-based customization.

## Use cases
- scan an internal subnet for open ports and services
- fingerprint web applications and services during red team engagements
- run harmless nuclei PoC checks against discovered services
- extract titles, certificates, and custom regex-matched info from services
- perform large-scale A-class network scanning through proxies or webshells
- customize scanning behavior with DSL config files
- run a scanner on legacy systems like Windows 2003

## When to choose
- you need a fast, single-binary scanner that runs on almost any OS including legacy Windows
- you want fine-grained control over scan behavior and minimal network noise
- you operate in restricted environments like webshells, C2 sessions, or multi-hop proxies
- you need port scanning plus fingerprinting plus PoC checks in one tool

## When to avoid
- you need service credential brute-forcing or exploitation — use companion tools like zombie or Metasploit
- you need a GUI-driven vulnerability scanner
- you only need simple port scanning where nmap or masscan suffice

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, networking, search-engine, cli, developer-tools
- domain: security, penetration-testing, networking
- platform: windows, cross-platform, cli
- tags: red-team, port-scanner, fingerprinting, recon, vulnerability-scanning, nuclei-poc, intranet-scanning, go, command-line, automation, linux, macos

## Member repositories
- chainreactors/gogo (main) score 91

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:16.375086+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:53:02.787355+00:00, confidence not recorded.
  - readme: https://github.com/chainreactors/gogo (fetched 2026-08-28T04:06:16.375086+00:00, sha a3d260d47297)
  - homepage: https://chainreactors.github.io/wiki/gogo/ (fetched 2026-08-29T10:33:12.229594+00:00, sha 269bef37ccf7)
  - site_page: https://wiki.chainreactors.red/IoM/getting-started (fetched 2026-08-29T10:33:12.241094+00:00, sha d505cd303139)
  - site_page: https://wiki.chainreactors.red/IoM/getting-started/concepts (fetched 2026-08-29T10:33:12.243106+00:00, sha 1f963ba08c60)
  - site_page: https://wiki.chainreactors.red/IoM/getting-started/design (fetched 2026-08-29T10:33:12.245123+00:00, sha 7741cdba9ce1)
  - site_page: https://wiki.chainreactors.red/IoM/getting-started/roadmap (fetched 2026-08-29T10:33:12.247415+00:00, sha 8758eccc1a07)
  - site_page: https://wiki.chainreactors.red/IoM/user-guide/client-quickstart (fetched 2026-08-29T10:33:12.249326+00:00, sha d51ca7e7c06f)
  - site_page: https://wiki.chainreactors.red/IoM/development/mals/quickstart (fetched 2026-08-29T10:33:12.250992+00:00, sha 868defb49d3f)
  - site_page: https://wiki.chainreactors.red/malefic/getting-started (fetched 2026-08-29T10:33:12.252895+00:00, sha 529a7d141f18)
  - site_page: https://wiki.chainreactors.red/malefic/getting-started/architecture (fetched 2026-08-29T10:33:12.254749+00:00, sha 72cb7cbd407c)
- Data as of 2026-08-30T08:39:29.467469+00:00.