
Nmap
CLI经典的网络探测与安全审计工具:主机发现、端口扫描、服务版本与操作系统识别,并可用 NSE 脚本做漏洞检测。只应扫描已获授权的网络。
Nmap 
Nmap is released under a custom license, which is based on (but not compatible with) GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for full details.
The latest version of this software as well as binary installers for Windows, macOS, and Linux (RPM) are available from Nmap.org
Full documentation is also available on the Nmap.org website.
Questions and suggestions may be sent to the Nmap-dev mailing list.
Installing
Ideally, you should be able to just type:
./configure
make
make install
For far more in-depth compilation, installation, and removal notes, read the Nmap Install Guide on Nmap.org.
Using Nmap
Nmap has a lot of features, but getting started is as easy as running nmap scanme.nmap.org. Running nmap without any parameters will give a helpful
list of the most common options, which are discussed in depth in the man
page. Users who prefer a graphical interface
can use the included Zenmap front-end.
Contributing
Information about filing bug reports and contributing to the Nmap project can be found in the HACKING and CONTRIBUTING.md files.
相關資源

Nuclei
CLI基于 YAML 模板的高性能漏洞扫描器:配合社区贡献的模板库,在 HTTP、DNS、TCP、SSL 等协议上检测已知漏洞,支持自定义模板并可接入 CI/CD。仅用于已授权的目标。
projectdiscovery/nuclei32.1k
HexStrike AI
MCP把 nmap、sqlmap、nuclei 等 150 多种安全工具封装给 agent 调度,覆盖网络侦察、Web 渗透、二进制分析与 CTF。需先克隆仓库、自行安装各安全工具并启动本地服务,仅用于已授权的测试。
0x4m4/hexstrike-ai12.9k
MCP Kali Server
MCP由 Kali 上的 API 服务和 MCP 桥接端两部分组成,agent 可以调用 nmap、sqlmap、Metasploit、Hydra 等工具,也能执行任意终端命令,用于授权渗透测试和 CTF。已收入 Kali 官方软件源。
Wh0am123/MCP-Kali-Server849
garak
CLINVIDIA 官方开源的大模型漏洞扫描器,探测提示注入、越狱、数据泄露、幻觉和有害内容等弱点,支持 OpenAI、Hugging Face、Bedrock 以及多数可经 REST 访问的模型。扫描云端模型时需要对应的 API Key。
NVIDIA/garak9.6k
Trivy
CLI一站式安全扫描器:检查容器镜像、文件系统、Git 仓库与 Kubernetes 集群中的已知漏洞、IaC 错误配置、泄露密钥与软件许可证,并能生成 SBOM。Aqua Security 开源维护。
aquasecurity/trivy38.5k
Grype
CLI扫描容器镜像、文件系统目录与 SBOM 中的已知漏洞,覆盖主流 Linux 发行版软件包和多种语言依赖,支持按 EPSS、KEV 排序风险,也支持用 OpenVEX 过滤结果,适合在 CI 中做漏洞门禁。由 Anchore 官方维护。
anchore/grype13k