GhostTroops/scan4all

Health v2 · maintenance only

Adoption not part of the score

6170 stars · 717 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

scan4all is a Go-based automated vulnerability scanning and reconnaissance tool that integrates vscan, nuclei, ksubdomain, and subfinder. It offers 15000+ PoCs, 23 kinds of application password brute-forcing, 7000+ web fingerprints, and port scanning across 146 protocols.

Use cases

• scan a target for known vulnerabilities with nuclei PoCs
• brute-force passwords for services like SSH, RDP, MySQL, Redis
• fingerprint web applications during recon
• enumerate subdomains and open ports automatically
• run automated bug bounty reconnaissance
• detect MS17-010 and other SMB vulnerabilities

When to choose

• you need an all-in-one automated vulnerability scanner for pentesting or bug bounty
• you want integrated port scanning, fingerprinting, and PoC exploitation in a single Go binary
• you need cross-platform red team tooling without assembling multiple tools

When to avoid

• you need a lightweight, single-purpose scanner rather than a heavy integrated toolkit
• your use case is defensive compliance scanning requiring audit-grade reporting
• you cannot legally or ethically run offensive scanning against targets

Facets

cli-tool · maturity active

security vulnerability-scanning penetration-testing networking cli security penetration-testing developer-tools windows cross-platform go vulnerability-scanner port-scanner recon bugbounty brute-force nuclei red-team fingerprinting command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="GhostTroops/scan4all")