一款证据驱动的 FOFA 资产测绘智能体：支持自然语言侦察、AI 反思、CLI / MCP / Skill / REST API，以及经人工审批的 Nuclei 扫描。
☆741Aug 16, 2026Updated last month
Alternatives and similar repositories for FofaMap
Users that are interested in FofaMap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.☆1,810Dec 26, 2025Updated 9 months ago
- Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。☆1,279Apr 10, 2026Updated 6 months ago
- FofaMap云查询版是基于C/S架构打造的Fofa数据采集器，仅需配置好一个服务端，即可实现多个客户端同时在线查询，其客户端支持FofaMap国庆版全部功能。☆41Feb 27, 2023Updated 3 years ago
- 利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点☆2,371Jun 9, 2023Updated 3 years ago
- EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具☆3,516Apr 2, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等☆2,153Updated this week
- Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。☆2,096Aug 15, 2026Updated last month
- 一款红队在大量的资产中存活探测与重点攻击系统指纹探测工具☆1,725Dec 22, 2023Updated 2 years ago
- A Security Tool for Bug Bounty, Pentest and Red Teaming.☆4,432Updated this week
- 信息收集自动化工具☆4,023Jun 13, 2024Updated 2 years ago
- Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack…☆3,256May 24, 2024Updated 2 years ago
- Glass是一款针对资产列表的快速指纹识别工具，通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹，也可针对IP/IP段或资产列表进行快速的指纹识别。☆1,013Jan 26, 2022Updated 4 years ago
- 集Fofa、Hunter鹰图、Shodan、360 quake、Zoomeye 钟馗之眼、censys 为一体的空间测绘gui图形界面化工具，支持一键采集爬取和导出fofa、shodan等数据，方便快捷查看☆788Feb 6, 2025Updated last year
- 新一代子域名主/被动收集工具 - Subdomain automatic/passive collection tool☆497Oct 9, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- 灯塔（最新版）指纹添加脚本！☆604Aug 12, 2021Updated 5 years ago
- 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具 ，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN…☆3,570Updated this week
- 高危漏洞利用工具☆1,829Feb 12, 2025Updated last year
- 针对 Acunetix AWVS扫描器开发的批量扫描脚本，支持log4j漏洞、SpringShell、SQL注入、XSS、弱口令等专项，支持联动xray、burp、w13scan等被动批量☆1,321Aug 5, 2025Updated last year
- 项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。☆1,892Jan 15, 2024Updated 2 years ago
- 自动化爬取并自动测试所有swagger接口☆1,188Dec 1, 2025Updated 10 months ago
- 傻瓜式漏洞PoC测试框架☆1,437Oct 30, 2023Updated 2 years ago
- xp_CAPTCHA(瞎跑 白嫖版) burp 验证码 识别 burp插件☆1,047Oct 11, 2024Updated 2 years ago
- SpringScan 漏洞检测 Burp插件☆603Nov 14, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- MDUT - Multiple Database Utilization Tools☆2,276Jul 23, 2026Updated 2 months ago
- 一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。☆3,189Jun 17, 2026Updated 3 months ago
- macOS上的小而美【Fofa、Shodan、Hunter、Zoomeye、Quake网络空间搜索引擎】闪电搜索器；GUI图形化(Mac/Windows)渗透测试信息搜集工具；资产搜集引擎；hw红队工具hvv☆666Dec 6, 2024Updated last year
- HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations. 赋能白帽，高效作战！☆4,399Updated this week
- Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能☆3,518Apr 26, 2023Updated 3 years ago
- goon,集合了fscan和kscan等优秀工具功能的扫描爆破工具。功能包含：ip探活、port扫描、web指纹扫描、title扫描、压缩文件扫描、fofa获取、ms17010、mssql、mysql、postgres、redis、ssh、smb、rdp、telnet、to…☆809Aug 5, 2024Updated 2 years ago
- heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等☆1,455May 21, 2024Updated 2 years ago
- 基于ARL-V2.6.2修改后的版本☆999Jun 26, 2025Updated last year
- 输入域名>爆破子域名>扫描子域名端口>发现扫描web服务>集成报告的全流程全自动扫描器。集成oneforall、masscan、nmap、dirsearch、crawlergo、xray等工具，另支持cdn识别、网页截图、站点定位；动态识别域名并添加功能、工具超时中断等☆809Mar 13, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 六大云存储，泄露利用检测工具☆1,265Mar 28, 2025Updated last year
- A Swagger API Exploit☆1,379Jun 7, 2024Updated 2 years ago
- 一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。☆1,833Aug 4, 2026Updated 2 months ago
- netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）☆2,237Jul 25, 2023Updated 3 years ago
- 红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool☆2,164Jul 25, 2026Updated 2 months ago
- 一款基于BurpSuite的被动式shiro检测插件☆1,809Dec 14, 2022Updated 3 years ago
- shiro反序列化漏洞综合利用（仅限授权测试使用）☆2,635Jun 4, 2026Updated 4 months ago