360 Secure SkillHub
360 安全技能中心

Security Scanner

提供端口扫描、全端口服务识别、Web 漏洞扫描（nuclei/nikto）、SSL/TLS 检测（sslscan/testssl.sh）等命令模板，并将结果整理为含严重性评级与建议的 Markdown 报告，仅限授权目标使用。

dmx64
dmx64
热度 99.12
最近更新 2026-05-11 15:57:18
分类：安全依赖：代码执行 / 读写文件应用场景：DevOps / 自动化脚本 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add security-scanner
Metadata
name
security-scanner
description
Automated security scanning and vulnerability detection for web applications, APIs, and infrastructure. Use when you need to scan targets for vulnerabilities, check SSL certificates, find open ports, detect misconfigurations, or perform security audits. Integrates with nmap, nuclei, and other security tools.

Security Scanner

Automated security scanning toolkit for penetration testing and vulnerability assessment.

Quick Start

Port Scan

nmap -sV -sC -oN scan.txt TARGET

Vulnerability Scan

nuclei -u TARGET -o results.txt

SSL Check

sslscan TARGET

Scan Types

1. Quick Recon

Fast initial scan for live hosts and open ports:

nmap -sn -T4 SUBNET  # Host discovery
nmap -F TARGET       # Fast port scan (top 100)

2. Full Port Scan

Comprehensive port and service detection:

nmap -p- -sV -sC -A TARGET -oN full_scan.txt

3. Web Application Scan

nuclei -u https://TARGET -t cves/ -t vulnerabilities/ -o web_vulns.txt
nikto -h TARGET -o nikto_report.txt

4. SSL/TLS Analysis

sslscan TARGET
testssl.sh TARGET

Output

Save reports to reports/security-scan-YYYY-MM-DD.md with:

  • Target information
  • Open ports and services
  • Vulnerabilities found (severity rated)
  • Recommendations

Ethics

  • Only scan authorized targets
  • Get written permission before testing
  • Report vulnerabilities responsibly
  • Never exploit without authorization