# opensec-cn/kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

Repository: https://github.com/opensec-cn/kunpeng
Canonical: https://ross.abutalabs.com/products/kunpeng
Language: Go
License: Apache-2.0
License Family: permissive
Topics: proof-of-concept, poc-library, security-vulnerability, security-testing
Last push: 2023-02-25T00:56:58+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 2794, "days_push": 1286, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1663, forks 319 (observed 2026-08-28T04:05:18.785453+00:00)

## What it is
Kunpeng is an open-source vulnerability POC (proof-of-concept) detection framework written in Go, bundling POCs for databases, middleware, web components, and CMSs covering weak passwords, SQL injection, XSS, RCE, and more. It is distributed as a dynamic link library (so/dll/dylib/go plugin) so developers in any language can embed it to quickly build vulnerability detection systems.

## Use cases
- check targets for known vulnerabilities from a poc library
- build a network asset security monitoring scanner
- integrate vulnerability detection into a pentest toolkit like msf
- use as the vulnerability database behind a web scanner
- detect weak passwords, sql injection, xss, and rce on services and web apps
- call vulnerability checks from python or other languages via a shared library

## When to choose
- you need a shared, community-maintained POC library instead of building your own
- you are writing a scanner or asset-monitoring system and want plug-in vulnerability checks
- you need cross-language vulnerability detection via a single dynamic library file

## When to avoid
- you need full exploitation capability rather than verification-only POCs
- you need actively updated POCs for brand-new CVEs, since the project's last release was early 2023
- you want a standalone scanner CLI rather than an embeddable library

## Facets
- artifact type: library
- maturity: maintenance
- function: security, vulnerability-scanning, penetration-testing, plugin-system
- domain: security, penetration-testing, developer-tools
- platform: windows, go, cross-platform
- tags: poc-framework, vulnerability-detection, shared-library, go-plugin, security-scanner, linux, macos

## Member repositories
- opensec-cn/kunpeng (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:18.785453+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:44:32.094924+00:00, confidence not recorded.
  - readme: https://github.com/opensec-cn/kunpeng (fetched 2026-08-28T04:05:18.785453+00:00, sha ce5e7de9cc10)
- Data as of 2026-08-30T08:39:29.467469+00:00.