{"adoption": {"forks": 576, "observed_at": "2026-08-28T04:08:07.956270+00:00", "stars": 3521}, "canonical_url": "https://ross.abutalabs.com/products/vulmap", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能", "domain": ["security", "penetration-testing"], "enriched": true, "function": ["vulnerability-scanning", "penetration-testing", "security", "osint"], "health_score": 20, "homepage": "https://github.com/zhzyker/vulmap", "language": "Python", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "maintenance", "member_repos": ["zhzyker/vulmap"], "name": "zhzyker/vulmap", "platform": ["windows", "cross-platform", "cli", "python"], "pushed_at": "2023-04-26T06:40:48+00:00", "repo": "zhzyker/vulmap", "stars": 3521, "tags": ["exploit", "cve", "rce", "vulnerability-scanner", "pentest-tool", "web-security", "fofa", "shodan", "batch-scanning", "red-team", "linux", "macos", "docker"], "topics": ["exploit", "cve", "rce", "vulnerabilities", "cve-2016-4437", "security", "security-tools", "pentesting", "pentest-tool", "cve-2020-14882", "cve-2020-2555", "cve-2020-2883", "scanner", "cve-2020-13942", "cve-2020-17518", "cve-2021-21972", "cve-2021-26855", "cve-2021-27065", "cve-2021-21975", "cve-2021-3129"], "urls": [], "use_cases": ["scan a web app for known cve vulnerabilities", "verify an rce found on weblogic or tomcat during a pentest", "bulk scan fofa or shodan results for exploitable cves", "check if a target is vulnerable to shiro deserialization or fastjson rce", "find a quick poc-based scanner for common java middleware cves", "turn vulnerability detection into direct exploitation in one tool"], "what_it_is": "Vulmap is a Python 3 command-line tool that scans web applications for known CVE vulnerabilities and can immediately verify or exploit them. It targets common middleware and frameworks such as WebLogic, Tomcat, Shiro, Spring, Struts2, Fastjson, Solr, Elasticsearch, Jenkins, and Drupal, and supports bulk scanning of assets from Fofa, Shodan, or dismap output files.", "when_to_avoid": ["You need a full enterprise DAST/vulnerability-management platform with authenticated scanning, reporting, and continuous monitoring", "Your target technology or CVE is not on its supported list (activemq, flink, shiro, solr, struts2, tomcat, unomi, drupal, elasticsearch, fastjson, jenkins, nexus, weblogic, jboss, spring, thinkphp)", "You require up-to-date coverage of newly published CVEs, since the project has not seen a release since April 2023"], "when_to_choose": ["You need a single lightweight CLI that both detects and verifies known CVEs in widely used web middleware and frameworks", "You want to batch-scan large asset lists from Fofa, Shodan, or dismap fingerprint results with multithreading", "You are doing an authorized security assessment and need fast proof-of-concept confirmation of RCE or deserialization flaws"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/vulmap", "repo": "zhzyker/vulmap", "role": "main", "score": 23}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:08:07.956270+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T18:35:32.111095+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "9a909b670293ee46b480f6b18f56ce69d037678f22e8d0f13a53d1587d9e45f8", "fetched_at": "2026-08-28T04:08:07.956270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/zhzyker/vulmap"}, {"content_hash": "c2f8173a92297c6823065d367432f9d8e083f1e92e56059e5b663e4755b1daac", "fetched_at": "2026-08-29T09:29:19.651411+00:00", "kind": "homepage", "missing": false, "url": "https://github.com/zhzyker/vulmap"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2154, "days_push": 1225, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 23, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}