iSafeBlue/TrackRay

Health v2 · maintenance only

Adoption not part of the score

2078 stars · 362 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

TrackRay (溯光) is an open-source penetration testing framework written in Java on SpringBoot that implements its own vulnerability scanning and integrates tools like Metasploit, Nmap, SQLMap, AWVS, Burpsuite, XRay, and Crawlergo. It provides a browser-based interface with WebSocket-driven interactive plugin consoles and supports plugin development in Java and Python via Jython.

Use cases

• run a vulnerability scan against a target website
• integrate nmap, sqlmap and metasploit in one web console
• scan assets and fingerprint web services
• brute-force credentials during an authorized pentest
• crawl a site to discover endpoints
• develop custom pentest plugins in Java or Python

When to choose

• you want a single browser-based console orchestrating multiple security tools
• you need an extensible pentest framework with Java/Python plugin support
• you're doing authorized security research or learning penetration testing

When to avoid

• you need a actively maintained tool with recent updates (last release 2023, changelog mostly 2019-2020)
• you need hardened, production-safe software (the project itself warns it contains vulnerabilities)
• commercial use is required (explicitly prohibited by the license/declaration)

Facets

framework · maturity maintenance

penetration-testing vulnerability-scanning web-scraping security plugin-system web-framework security penetration-testing developer-tools jvm self-hosted pentest-framework vulnerability-scanner metasploit nmap sqlmap awvs burpsuite spring-boot websocket-console asset-scanning fingerprinting brute-force port-scanning code-audit docker web-server linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="iSafeBlue/TrackRay")