gogo-scan

Scan ports and identify service fingerprints using the gogo network scanner.

1|Updated Aug 3, 2026
One-click install
npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill gogo-scan-hanmujun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gogo-scan
Source: https://github.com/hanmujun/hanmujun-agent-public/tree/main/skill-library/gogo-scan
Command: npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill gogo-scan-hanmujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manually probing hosts and guessing which services run behind open ports is slow and error-prone. This Skill automates high-speed port scanning with precise fingerprinting so you can identify web frameworks, middleware versions, and CMS types across single hosts or entire network segments. ## Core Features & Use Cases - High-Speed Port Scanning: Scan single IPs, CIDR ranges, or target lists with configurable concurrency, timeouts, and port sets including top1000 presets. - Precise Fingerprinting: Apply 2000+ built-in fingerprint rules with optional version detection to identify services, frameworks, and middleware versions. - Structured Output & Tool Chaining: Export results as JSON or CSV and pipe discovered URIs into nuclei or httpx for vulnerability scanning and HTTP probing. - Use Case: During an authorized CTF or internal assessment, scan 10.0.0.0/24 for web services, export JSON, then feed the discovered URLs directly into nuclei templates for vulnerability checks. ## Quick Start Ask the agent to scan the target network segment with gogo using top1000 ports and export the fingerprinted results as JSON for follow-up analysis.

Frequently Asked Questions about gogo-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a network segment for open ports with gogo?▼

Run gogo with the -i flag followed by a CIDR range, such as gogo -i 10.0.0.0/24, and specify ports with -p like top1000 or a comma-separated list. Add -o result.json -f json to export structured output.

What is the difference between gogo and fscan for port scanning?▼

gogo focuses on scanning precision and fingerprint coverage with 2000+ rules for identifying services and middleware versions, while fscan also covers weak password checks and POC verification. Choose gogo when accurate service identification matters more than exploitation checks.

How do I chain gogo scan results into nuclei vulnerability scanning?▼

Export gogo results as JSON, then use jq to filter web service URIs by port and pipe them into nuclei with your templates directory. This automates the flow from service discovery to vulnerability detection.

Does gogo support version detection for identified services?▼

Yes, gogo supports version probing via the -v flag, which gives more precise service and middleware version identification at the cost of slower scans. Combine it with port presets like top1000 for balanced coverage.

When should I use naabu or nmap instead of gogo?▼

Use naabu or nmap for large-scale SYN scanning or full 65535-port coverage where raw speed and completeness matter. gogo is better suited when you need accurate fingerprinting of discovered services rather than exhaustive port enumeration.