mcpField
G
gogo-scan

gogo-scan

github.com/wgpsecSecurity1.8k42 installsUpdated 4d ago
Repository

About gogo-scan

gogo-scan is a skill for port scanning and service fingerprinting with gogo, aimed at network inventory and Web technology identification. It includes more than 2,000 fingerprint rules and exports structured results.

Key features

  1. 01Scan targets, subnets, and selected ports
  2. 02Identify Web frameworks, CMS, and middleware versions
  3. 03Configure concurrency, timeouts, and version probes
  4. 04Export results as JSON or CSV
  5. 05Filter for live services with fingerprints

Use cases

  1. 01Inventory hosts and open services on a network
  2. 02Identify the technology stack behind Web services
  3. 03Pass scan results to nuclei or httpx

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/wgpsec/aboutsecurity --skill gogo-scan

After installing, type/gogo-scanin Claude Code to confirm it loaded.

Details

From the project README

gogo 高速端口扫描与指纹识别

gogo 的核心优势是指纹精度——内置 2000+ 指纹规则，能精确识别 Web 框架、中间件版本、CMS 类型，输出结构化 JSON 便于后续处理。

项目地址：https://github.com/chainreactors/gogo

基本用法

# 扫描单个目标
gogo -i 10.0.0.1

# 扫描网段
gogo -i 10.0.0.0/24

# 扫描指定端口
gogo -i 10.0.0.0/24 -p 80,443,8080,8443

# 扫描 Top1000 端口
gogo -i 10.0.0.0/24 -p top1000

# 从文件读取目标
gogo -l targets.txt

输出控制

# JSON 输出（便于后续处理）
gogo -i 10.0.0.0/24 -o result.json -f json

# 只输出存活 + 有指纹的
gogo -i 10.0.0.0/24 --filter

# CSV 输出
gogo -i 10.0.0.0/24 -o result.csv -f csv

高级扫描

# 调整并发（默认 500，内网可加大）
gogo -i 10.0.0.0/16 -t 2000

# 启用版本探测（更精确但更慢）
gogo -i 10.0.0.1 -p top1000 -v

# 指定超时（毫秒）
gogo -i 10.0.0.0/24 --timeout 3000

# 排除端口
gogo -i 10.0.0.0/24 --exclude-port 22,80

与其他工具联动

# gogo 发现服务 → nuclei 扫描漏洞
gogo -i 10.0.0.0/24 -p top1000 -o result.json -f json
cat result.json | jq -r '.[] | select(.port==80 or .port==443 or .port==8080) | .uri' | nuclei -t ~/nuclei-templates/

# gogo 发现服务 → httpx 探测
gogo -i 10.0.0.0/24 -o result.json -f json
cat result.json | jq -r '.uri' | httpx -silent

决策树

需要扫描什么？
├─ 快速看网段存活 + 弱口令 + POC → fscan
├─ 精确指纹识别（Web 框架/CMS/中间件版本）→ gogo
├─ 大规模端口扫描（SYN/全端口）→ naabu 或 nmap
└─ 子域名资产 → subfinder + httpx

Comments

Markdown supported