{"adoption": {"forks": 179, "observed_at": "2026-08-28T04:06:38.755346+00:00", "stars": 2340}, "canonical_url": "https://ross.abutalabs.com/products/springboot-scan", "card": {"archived": false, "artifact_type": "cli-tool", "description": "针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具", "domain": ["security", "penetration-testing", "web-development", "developer-tools"], "enriched": true, "function": ["penetration-testing", "vulnerability-scanning", "security", "web-scraping"], "health_score": 67, "homepage": "https://blog.zgsec.cn/archives/129.html", "language": "Python", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["AabyssZG/SpringBoot-Scan"], "name": "AabyssZG/SpringBoot-Scan", "platform": ["python", "cli", "cross-platform"], "pushed_at": "2025-11-09T14:58:39+00:00", "repo": "AabyssZG/SpringBoot-Scan", "stars": 2340, "tags": ["spring-boot", "spring-vulnerabilities", "cve-exploitation", "sensitive-endpoint-scanning", "red-team", "offensive-security", "asset-mapping", "fofa", "zoomeye", "hunter"], "topics": ["spring", "spring-boot", "spring-vulnerability", "springboot", "vul", "security", "security-tools", "cve-2018-1273", "cve-2021-21234", "cve-2022-22947", "cve-2022-22963", "cve-2022-22965", "exploit", "exploits", "cve-2024-37084", "cve-2025-41243", "cve-2021-21344"], "urls": [], "use_cases": ["scan spring boot apps for sensitive actuator endpoints", "test spring boot for known CVE exploits", "check if a spring cloud gateway is vulnerable to CVE-2022-22947", "bulk scan a list of urls for spring boot information leaks", "export target assets from fofa or zoomeye for spring boot scanning", "interactively run commands on a spring rce vulnerability", "brute force spring boot endpoint directories"], "what_it_is": "SpringBoot-Scan is an open-source penetration testing framework targeting Spring Boot applications, written in Python. It scans for sensitive information-leakage endpoints and tests for a range of high-risk Spring-related CVEs such as Spring Core RCE (CVE-2022-22965) and Spring Cloud Gateway SpEL RCE (CVE-2022-22947).", "when_to_avoid": ["you need a general-purpose web vulnerability scanner beyond Spring", "you require a GUI or continuous vulnerability management platform", "your use case is defensive-only patch tracking rather than active testing"], "when_to_choose": ["you are doing authorized penetration testing against Spring Boot microservices", "you need a single tool covering many Spring CVE exploit modules", "you want batch scanning of URL lists for sensitive endpoint leaks"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/springboot-scan", "repo": "AabyssZG/SpringBoot-Scan", "role": "main", "score": 53}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:38.755346+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:37:24.296012+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7e19f2dc9177008cd83cb0ebc2434fbcc87e509d2632878a70108cc9b1170b6d", "fetched_at": "2026-08-28T04:06:38.755346+00:00", "kind": "readme", "missing": false, "url": "https://github.com/AabyssZG/SpringBoot-Scan"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 51, "longevity": 93, "rhythm": 32}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1313, "days_push": 297, "days_rel": 297, "gap_med": 121.5, "n_releases_24m": 3}, "score": 53, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}