# veo/vscan

开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)

Repository: https://github.com/veo/vscan
Canonical: https://ross.abutalabs.com/products/vscan
Homepage: https://veo.pub/2021/vscan/
Language: Go
License: BSD-3-Clause
License Family: permissive
Topics: portscan, fingerprint, brute, security, redteam, fuzzing, 0day
Last push: 2023-10-10T09:44:49+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 1903, "days_push": 1058, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1632, forks 254 (observed 2026-08-28T04:05:14.165279+00:00)

## What it is
vscan is an open-source, lightweight, fast, cross-platform website vulnerability scanner written in Go, built for red team reconnaissance. It combines port scanning, service fingerprinting (6800+ fingerprints), known-vulnerability (nday) POC checks compatible with Xray and Nuclei, admin login brute-forcing, and sensitive file fuzzing in a single tool.

## Use cases
- scan a target network for open ports and identify services
- fingerprint web technologies on discovered hosts
- check websites for known vulnerabilities with POCs
- brute-force admin login pages
- discover sensitive or exposed files on a web server
- reconnaissance during authorized red team engagements
- quickly assess a website's security posture from the command line

## When to choose
- you need a single fast Go binary combining port scan, fingerprint, and POC checks
- you want Xray or Nuclei POC compatibility in a lightweight scanner
- you need cross-platform CLI recon tooling for authorized pentesting
- you want an open-source alternative to Goby for red team foothold scanning

## When to avoid
- you need a full-featured scanner like Nmap for deep network enumeration
- you require continuous scanning or a GUI/web dashboard
- you lack explicit authorization to test the target systems
- you need actively maintained tooling with recent updates

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: penetration-testing, vulnerability-scanning, security, networking, fuzzing
- domain: security, penetration-testing, developer-tools
- platform: windows, cli, go, cross-platform
- tags: vulnerability-scanner, port-scanner, fingerprinting, redteam, poc-detection, brute-force, sensitive-file-discovery, xray-poc, nuclei-poc, command-line, linux, macos

## Member repositories
- veo/vscan (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:14.165279+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:47:48.401225+00:00, confidence not recorded.
  - readme: https://github.com/veo/vscan (fetched 2026-08-28T04:05:14.165279+00:00, sha 6bb7892b67ad)
  - homepage: https://veo.pub/2021/vscan/ (fetched 2026-08-29T11:20:23.258641+00:00, sha 34dac53825d4)
  - site_page: https://veo.pub/about (fetched 2026-08-29T11:20:23.275313+00:00, sha 4e0e5814e6a0)
- Data as of 2026-08-30T08:39:29.467469+00:00.