ysrc/xunfeng

Health v2 · maintenance only

Adoption not part of the score

3597 stars · 1312 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Xunfeng is a self-hosted web application for rapid vulnerability emergency response and continuous scanning of enterprise internal networks. It combines a network asset identification engine (port scanning via MASSCAN, service/CMS fingerprinting) with a plugin-based vulnerability detection engine manageable through a web console.

Use cases

• scan internal network for assets and open ports
• discover services and CMS fingerprints across an intranet
• run scheduled vulnerability checks with custom plugins
• detect weak passwords like FTP brute force
• generate vulnerability reports for security audits
• quickly respond to new CVEs across internal hosts

When to choose

• you need a self-hosted internal network asset inventory and vulnerability scanner
• you want a web UI to manage scheduled scans and Python/JSON vulnerability plugins
• you are doing authorized enterprise intranet security assessments

When to avoid

• you need a modern actively developed tool - it targets Python 2.7 and MongoDB 3.4
• you need external internet-wide scanning rather than internal network cruising
• you require Windows-native agents or cloud-managed scanning

Facets

application · maturity maintenance

security vulnerability-scanning search-engine web-framework scheduling security penetration-testing networking self-hosted windows python self-hosted internal-network-scanner asset-discovery vulnerability-assessment masscan enterprise-security python2 linux macos docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ysrc/xunfeng")