asaotomo/FofaMap

FofaMap v2.0 是一款基于 Python3 开发的全网首个 AI 驱动红队资产测绘智能体。在延续原有 FOFA 数据采集、存活检测、统计聚合、图标 Hash 及批量查询等核心功能的基础上，2.0 版本原生支持 MCP 协议，可无缝接入 Cursor、Claude 等 AI 平台。其核心内置了 AI 自我反思机制，能根据查询结果自动调优语法，并智能联动 Nuclei 推荐精准扫描策略，实现从“被动采集”到“主动智能决策”的红队作业进化。

681 starsPythonApache-2.0python3ai-agentasset-mappingfofa-api

SCANNED69/100

Scanned 2026-07-10 · deepseek v1

Dimension breakdown

Security

45/100

7 findings

Quality

72/100

No findings

License

85/100

No findings

Completeness

85/100

No findings

Findings (7)

CRITICAL: 2HIGH: 2MEDIUM: 2LOW: 1

CRITICALsecurityHardcoded API Keys in Configuration File
CRITICALsecurityCommand Injection via Nuclei Arguments
HIGHsecuritySSRF via FOFA API Calls
HIGHsecurityInsecure Deserialization of AI Responses
MEDIUMsecurityLack of Input Validation in MCP Server

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/asaotomo/FofaMap.svg)](https://archimedes.market/r/asaotomo/FofaMap)

HTML

<a href="https://archimedes.market/r/asaotomo/FofaMap"><img src="https://archimedes.market/api/badge/asaotomo/FofaMap.svg" alt="Archimedes Trust Verified"/></a>