返回 Skill 列表
extension
分类: 安全与合规无需 API Key

Security Scanner

自动化安全扫描和漏洞检测,适用于Web应用、API和基础设施;可进行漏洞扫描、SSL证书检查、开放端口检测、配置错误发现及安全审计,集成nmap、nuclei等安全工具。

person作者: dmx64hubclawhub

Security Scanner

Automated security scanning toolkit for penetration testing and vulnerability assessment.

Quick Start

Port Scan

nmap -sV -sC -oN scan.txt TARGET

Vulnerability Scan

nuclei -u TARGET -o results.txt

SSL Check

sslscan TARGET

Scan Types

1. Quick Recon

Fast initial scan for live hosts and open ports:

nmap -sn -T4 SUBNET  # Host discovery
nmap -F TARGET       # Fast port scan (top 100)

2. Full Port Scan

Comprehensive port and service detection:

nmap -p- -sV -sC -A TARGET -oN full_scan.txt

3. Web Application Scan

nuclei -u https://TARGET -t cves/ -t vulnerabilities/ -o web_vulns.txt
nikto -h TARGET -o nikto_report.txt

4. SSL/TLS Analysis

sslscan TARGET
testssl.sh TARGET

Output

Save reports to reports/security-scan-YYYY-MM-DD.md with:

  • Target information
  • Open ports and services
  • Vulnerabilities found (severity rated)
  • Recommendations

Ethics

  • Only scan authorized targets
  • Get written permission before testing
  • Report vulnerabilities responsibly
  • Never exploit without authorization