# tongcheng-security-team/NextScan

飞刃是一套完整的企业级黑盒漏洞扫描系统，集成漏洞扫描、漏洞管理、扫描资产、爬虫等服务。 拥有强大的漏洞检测引擎和丰富的插件库，覆盖多种漏洞类型和应用程序框架。

Repository: https://github.com/tongcheng-security-team/NextScan
Canonical: https://ross.abutalabs.com/products/nextscan
Homepage: https://next-scan.ly.com/user-guide/start/
Language: JavaScript
License Family: other
Last push: 2023-06-30T12:26:13+00:00

## Health v2 (maintenance only)
Score: 21/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 90
- inputs: {"age_days": 1265, "days_push": 1160, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1164, forks 105 (observed 2026-08-28T04:03:49.810221+00:00)

## What it is
NextScan (飞刃) is an enterprise-grade distributed black-box vulnerability scanning platform built in Go, composed of Server, Agent, and Web components. It integrates vulnerability scanning, vulnerability and POC management, asset management, and a headless-browser crawler, with deep Nuclei integration supporting 5000+ POC templates.

## Use cases
- scan web applications for common vulnerabilities
- manage vulnerabilities and POCs in one platform
- run distributed large-scale security scans
- crawl websites with a headless browser for attack surface discovery
- passively scan traffic through an HTTP proxy
- ingest scan targets from Kafka traffic or logs
- assess enterprise assets for host and service vulnerabilities

## When to choose
- you need an out-of-the-box enterprise vulnerability scanning platform with a web UI
- you want Nuclei-compatible POC scanning with distributed horizontal scaling
- you need combined asset discovery, crawling, scanning, and vulnerability management
- you want multiple scan sources including proxy, browser plugin, and Kafka feeds

## When to avoid
- you need full source code - the code is not fully open-sourced yet, only binaries are released
- you need ARM/Apple Silicon support - only amd64 is well tested
- you need a lightweight CLI-only scanner rather than a full platform with MongoDB, Redis, and etcd dependencies
- you require an OSI-approved license - the repository has none

## Facets
- artifact type: application
- maturity: maintenance
- function: vulnerability-scanning, security, web-scraping, self-hosted, developer-tools
- domain: security, penetration-testing, web-development, self-hosted
- platform: self-hosted, go
- tags: black-box-scanner, nuclei-integration, distributed-scanning, poc-management, headless-browser-crawler, passive-scanning, vulnerability-management, enterprise-security, linux, docker, web-server

## Member repositories
- tongcheng-security-team/NextScan (main) score 21

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:49.810221+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:31:31.453853+00:00, confidence not recorded.
  - readme: https://github.com/tongcheng-security-team/NextScan (fetched 2026-08-28T04:03:49.810221+00:00, sha b9b7b85ed5f2)
  - homepage: https://next-scan.ly.com/user-guide/start/ (fetched 2026-08-29T12:36:20.524038+00:00, sha 355dcc9e5639)
  - site_page: https://next-scan.ly.com/install/binary (fetched 2026-08-29T12:36:20.533033+00:00, sha 41688a4c394f)
  - site_page: https://next-scan.ly.com/install/docker (fetched 2026-08-29T12:36:20.535156+00:00, sha 0b64b952236a)
  - site_page: https://next-scan.ly.com/install/proxy (fetched 2026-08-29T12:36:20.537001+00:00, sha 3d4397d8831b)
  - site_page: https://next-scan.ly.com/install/upgrade (fetched 2026-08-29T12:36:20.538762+00:00, sha 086d451adb47)
  - site_page: https://next-scan.ly.com/user-guide/faq (fetched 2026-08-29T12:36:20.540636+00:00, sha 85246fca8ca6)
  - site_page: https://next-scan.ly.com/about/change_log (fetched 2026-08-29T12:36:20.542527+00:00, sha 2d4c2c6d0109)
  - site_page: https://next-scan.ly.com/about/disclaimer (fetched 2026-08-29T12:36:20.544131+00:00, sha 648e001298c3)
  - site_page: https://next-scan.ly.com/about/contributor (fetched 2026-08-29T12:36:20.545598+00:00, sha 9df34f9a6b6d)
- Data as of 2026-08-30T08:39:29.467469+00:00.