Scanners Box：终端化网络安全扫描工具集合 2026 版

git clone https://github.com/scanners-box/scanners.git
cd scanners
./setup.sh

# Homebrew
brew install scanners-box

# APT
apt install scanners-box

# 使用 nmap
scanners nmap scanme.nmap.org

# 使用 masscan（超快）
scanners masscan -p80,443,8080 scanme.nmap.org

# 子域枚举
scanners subfinder -d example.com

# 验证 subdomains
scanners httpx -l subdomains.txt

# Nuclei 模板扫描
scanners nuclei -u https://example.com -t cves/2024/

# 运行自定义模板
scanners nuclei -t ./my-templates/

# 在 ~/.bashrc 中添加
source ~/.scanners-box/init.sh

# 快速扫描
quick-scan() {
    subfinder -d $1 | httpx | nuclei -t cves/
}

from scanners import run

result = run("nmap", target="127.0.0.1", port="80-443")

# 添加自定义模板
cp my-exploit.yaml ~/.scanners-box/templates/

# 更新 nuclei 模板
scanners nuclei-update

# 全局代理
export HTTP_PROXY=http://127.0.0.1:8080
export HTTPS_PROXY=http://127.0.0.1:8080

# 扫描时使用代理
scanners nmap --proxy socks5://127.0.0.1:1080 target

# JSON 输出
scanners httpx -l targets.txt -json > results.json

# CSV 输出
scanners nuclei -l targets.txt -csv > vulns.csv

# 批量处理
cat targets.txt | while read domain; do
    scanners subfinder -d $domain | httpx
done

# 扫描整个 IPv4
masscan 0.0.0.0/0 -p80 --rate=1000

# 使用高级模板
nuclei -t https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/master/exposures/

# 自动化扫描
scanners nmap $HTB_IP --top-ports 1000

# 靶机扫描
scanners httpx -l rooms.txt -ports 80,443,8080