niudaii/zpscan

Health v2 · maintenance only

Adoption not part of the score

1196 stars · 102 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

zpscan is a Go-based command-line information gathering and reconnaissance tool for security assessments. It bundles subdomain enumeration, web fingerprinting, port scanning, service credential brute-forcing, directory scanning, and POC-based vulnerability scanning into a single CLI.

Use cases

• enumerate subdomains for a target domain
• fingerprint web technologies and detect CDNs
• scan ports and identify services on an IP range
• brute-force weak credentials on services like ssh, mysql, redis
• scan targets for known vulnerabilities with nuclei/goby/xray POCs
• discover hidden directories on a web application

When to choose

• you want an all-in-one recon and scanning CLI in a single Go binary
• you need chained workflows like ipscan -> webscan -> crack
• you want support for multiple POC formats (nuclei, goby, xray)

When to avoid

• you need a mature, extensively audited scanner for production security programs
• you require a GUI or web dashboard
• you need deep exploitation capabilities beyond POC verification

Facets

cli-tool · maturity active

osint vulnerability-scanning web-scraping security cli security penetration-testing osint cli windows go recon subdomain-enumeration port-scanning fingerprinting brute-force poc-scanning directory-scanning command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="niudaii/zpscan")