opensec-cn/kunpeng

Health v2 · maintenance only

Adoption not part of the score

1663 stars · 319 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Kunpeng is an open-source vulnerability POC (proof-of-concept) detection framework written in Go, bundling POCs for databases, middleware, web components, and CMSs covering weak passwords, SQL injection, XSS, RCE, and more. It is distributed as a dynamic link library (so/dll/dylib/go plugin) so developers in any language can embed it to quickly build vulnerability detection systems.

Use cases

• check targets for known vulnerabilities from a poc library
• build a network asset security monitoring scanner
• integrate vulnerability detection into a pentest toolkit like msf
• use as the vulnerability database behind a web scanner
• detect weak passwords, sql injection, xss, and rce on services and web apps
• call vulnerability checks from python or other languages via a shared library

When to choose

• you need a shared, community-maintained POC library instead of building your own
• you are writing a scanner or asset-monitoring system and want plug-in vulnerability checks
• you need cross-language vulnerability detection via a single dynamic library file

When to avoid

• you need full exploitation capability rather than verification-only POCs
• you need actively updated POCs for brand-new CVEs, since the project's last release was early 2023
• you want a standalone scanner CLI rather than an embeddable library

Facets

library · maturity maintenance

security vulnerability-scanning penetration-testing plugin-system security penetration-testing developer-tools windows go cross-platform poc-framework vulnerability-detection shared-library go-plugin security-scanner linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="opensec-cn/kunpeng")