gogo-scan

Scan IP ranges and fingerprint services with structured JSON output.

1.6k|234|Updated Dec 7, 2019
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill gogo-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gogo-scan
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/gogo-scan
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill gogo-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Many port scanners only report open ports without reliably identifying the underlying service, framework, or middleware version; this Skill focuses on high-precision fingerprinting to turn raw port results into actionable service intelligence for targeted follow-up testing.

Core Features & Use Cases

  • High-precision fingerprinting: Leverages 2000+ fingerprint rules to identify web frameworks, middleware, CMS types and versions.
  • Structured output & integration: Produces JSON and CSV outputs that can be piped into nuclei, httpx, or custom parsers for automated vulnerability scanning.
  • Performance controls: Supports high concurrency, timeout tuning, port inclusion/exclusion, and TLS certificate extraction for scalable asset discovery.
  • Use Case: Use gogo to scan a subnet, extract service URIs and certificates, then feed the results into nuclei and httpx to prioritize vulnerability checks.

Quick Start

Run gogo to scan the 10.0.0.0/24 network for the top1000 ports and save structured JSON results by executing gogo -i 10.0.0.0/24 -p top1000 -o result.json -f json.

Frequently Asked Questions about gogo-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify service versions and web frameworks during a port scan?

Service fingerprinting during a port scan identifies underlying web frameworks and middleware versions. This skill applies 2000+ fingerprint rules to open ports, turning raw scan data into actionable service intelligence for targeted vulnerability testing.

How do I scan an internal subnet and save structured JSON results for asset discovery?

To scan a subnet for asset discovery, execute the scanner targeting your IP range with desired ports and output the structured JSON results. You can run `gogo -i 10.0.0.0/24 -p top1000 -o result.json -f json` to save structured asset data.

Can I extract TLS certificates and control concurrency for large-scale network scans?

Yes, this port scanning approach supports high concurrency controls, timeout tuning, and TLS certificate extraction. These performance controls allow scalable asset discovery across extensive internal and external IP ranges without overwhelming network resources.

What is the best way to automate vulnerability scanning after port scanning?

The best way to automate vulnerability scanning is piping structured JSON or CSV port scan output into downstream tools. You can feed extracted service URIs and TLS certificates directly into nuclei and httpx to prioritize targeted vulnerability checks.

Does basic port scanning miss web framework and CMS version details?

Yes, many basic port scanners only report open ports without reliably identifying the underlying service. High-precision fingerprinting is required to extract specific CMS types, middleware versions, and web frameworks for actionable follow-up testing.

Are there limitations when excluding specific ports during high-speed service identification?

During high-speed service identification, you can tune performance by including or excluding specific ports. However, excluding ports limits fingerprint rule coverage, potentially missing active services and reducing the accuracy of comprehensive asset discovery across the target network.