chaitin/xpoc

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1186 stars · 49 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

xpoc is a fast emergency-response vulnerability scanner from Chaitin's xray community, designed for supply chain vulnerability scanning. It supports cloud-synced POC plugins in xray YAML format, custom Go plugins, TCP/UDP probing, port scanning, and JSON/HTML report output.

Use cases

• scan a target for known vulnerabilities
• run emergency response checks for newly disclosed CVEs
• batch scan a list of hosts from a file
• scan supply chain dependencies for vulnerabilities
• write and load custom POC plugins in xray yaml format
• perform port scanning and host liveness detection
• pull the latest cloud POC plugins before scanning

When to choose

• you need rapid verification of newly disclosed vulnerabilities across many hosts
• you already use xray and want compatible YAML POC scripts
• you want cloud-synced POCs for fast incident response
• you need a lightweight CLI scanner with JSON/HTML output

When to avoid

• you need a full web application vulnerability scanner like xray with crawling and active exploitation
• you require authenticated or deep DAST scanning
• you want a GUI-based vulnerability management platform
• your use case is compliance auditing rather than quick POC verification

Facets

cli-tool · maturity active

vulnerability-scanning networking security cli plugin-system security penetration-testing developer-tools windows cli poc-scanner emergency-response supply-chain-security xray-poc port-scanning cloud-plugins command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="chaitin/xpoc")