veo/vscan

Health v2 · maintenance only

Adoption not part of the score

1632 stars · 254 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

vscan is an open-source, lightweight, fast, cross-platform website vulnerability scanner written in Go, built for red team reconnaissance. It combines port scanning, service fingerprinting (6800+ fingerprints), known-vulnerability (nday) POC checks compatible with Xray and Nuclei, admin login brute-forcing, and sensitive file fuzzing in a single tool.

Use cases

• scan a target network for open ports and identify services
• fingerprint web technologies on discovered hosts
• check websites for known vulnerabilities with POCs
• brute-force admin login pages
• discover sensitive or exposed files on a web server
• reconnaissance during authorized red team engagements
• quickly assess a website's security posture from the command line

When to choose

• you need a single fast Go binary combining port scan, fingerprint, and POC checks
• you want Xray or Nuclei POC compatibility in a lightweight scanner
• you need cross-platform CLI recon tooling for authorized pentesting
• you want an open-source alternative to Goby for red team foothold scanning

When to avoid

• you need a full-featured scanner like Nmap for deep network enumeration
• you require continuous scanning or a GUI/web dashboard
• you lack explicit authorization to test the target systems
• you need actively maintained tooling with recent updates

Facets

cli-tool · maturity maintenance

penetration-testing vulnerability-scanning security networking fuzzing security penetration-testing developer-tools windows cli go cross-platform vulnerability-scanner port-scanner fingerprinting redteam poc-detection brute-force sensitive-file-discovery xray-poc nuclei-poc command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="veo/vscan")