v3n0m-Scanner/V3n0M-Scanner

Health v2 · maintenance only

Adoption not part of the score

1573 stars · 414 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

V3n0M is an offensive security framework and vulnerability scanner written in Python 3.6+ using asyncio. It scans for SQLi, XSS, LFI/RFI vulnerabilities, resolves Cloudflare-protected targets, brute-forces DNS, and finds vulnerable FTP services using large dork lists.

Use cases

• scan websites for sql injection vulnerabilities
• find xss and lfi vulnerabilities in web apps
• resolve cloudflare-protected origins behind a site
• brute force dns subdomains during pentest
• scan large ip ranges for vulnerable ftp services
• discover admin pages of a target site

When to choose

• you need a free, open-source multi-vuln scanner for authorized pentesting
• you want asyncio-based scanning of large dork or IP lists
• you run Kali/BlackArch and want a quick vulnerability sweep

When to avoid

• you need a maintained, regularly updated scanner - the project notes it is outdated
• you lack authorization to test the targets - this is offensive tooling
• you need a GUI or enterprise-grade reporting

Facets

cli-tool · maturity maintenance

vulnerability-scanning penetration-testing web-scraping security security penetration-testing windows python cli sqli xss lfi dork-scanner pentesting asyncio cloudflare-resolver dns-bruteforce linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="v3n0m-Scanner/V3n0M-Scanner")