Is the Scan-Spring-GO MCP server actively maintained?

The Scan-Spring-GO MCP server was last committed 2mo ago and has 2 contributors. Issue health: 100% of issues resolved. AgentRank freshness score reflects real-time maintenance activity.

Scan-Spring-GO MCP Server

Name: sspsec/Scan-Spring-GO
Rating: 3.9 (1 reviews)
Author: sspsec

sspsec/Scan-Spring-GO

Score: 73.6 Rank #3387 MCP Server

[![AgentRank](https://agentrank-ai.com/api/v1/badge/sspsec--Scan-Spring-GO)](https://agentrank-ai.com/tool/sspsec--Scan-Spring-GO/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge)

Are you the maintainer of sspsec/Scan-Spring-GO? Claim this listing →

Spring 全家桶漏洞扫描工具 | 17 个漏洞模块 + MCP 服务端（AI 自动化渗透）| Go 实现

Add AgentRank to Claude Code Discover and compare tools like sspsec/Scan-Spring-GO — your AI finds the right one automatically

Get API Access →

claude mcp add agentrank -- npx -y agentrank-mcp-server

Overview

sspsec/Scan-Spring-GO is a Go tool licensed under MIT. Spring 全家桶漏洞扫描工具 | 17 个漏洞模块 + MCP 服务端（AI 自动化渗透）| Go 实现 Topics: security, spring, pentest, exploit, rce, spel, springboot, redteam, bugbounty, vulnerability-scanner, mcp, golang.

Ranked #3387 out of 24846 indexed tools.

Ecosystem

Go MIT

securityspringpentestexploitrcespelspringbootredteambugbountyvulnerability-scannermcpgolang

Score Breakdown

Stars 15% 303

303 stars → growing community

Freshness 25% 2mo ago

Last commit 2mo ago → moderate activity

Issue Health 25% 100%

5/5 issues closed → responsive maintainer

Contributors 10% 2

2 contributors → solo project

Dependents 25% 0

No dependents → no downstream usage

npm Downloads N/A

PyPI Downloads N/A

Forks 17

Description Good

License MIT

Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →

How to Improve

Description low impact

Expand your description to 150+ characters for better discoverability

Freshness high impact

Last commit was 74 days ago — a recent commit would boost your freshness score

Dependents medium impact

No downstream dependents detected yet — adoption by other projects is the strongest trust signal

Badge all embed codes →

Markdown

[![AgentRank](https://agentrank-ai.com/api/v1/badge/sspsec--Scan-Spring-GO)](https://agentrank-ai.com/tool/sspsec--Scan-Spring-GO/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge)

HTML

<a href="https://agentrank-ai.com/tool/sspsec--Scan-Spring-GO/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/v1/badge/sspsec--Scan-Spring-GO" alt="AgentRank"></a>

Embed Widget docs →

HTML

<script src="https://agentrank-ai.com/embed.js" data-tool="sspsec/Scan-Spring-GO"></script>

Details

Stars: 303
Forks: 17
Open Issues: 0
Closed Issues: 5
Contributors: 2
Dependents: —
Language: Go
License: MIT
Last Commit: 2mo ago

Matched Queries

topic:mcp

From the README

# **SSP - Spring 框架漏洞扫描工具**

## 🚀 简介

SSP 是一个使用 Go 语言实现的轻量、高效的 Spring 全家桶漏洞扫描与利用工具：支持 17 个漏洞模块的检测与利用、actuator/swagger/druid 信息泄露探测、自定义字典、并发限速控制，并内置 **MCP 服务端**——可将全部能力暴露给 AI 客户端（Claude Desktop、ZCode、Cursor 等），实现"AI 一句话完成从指纹识别到漏洞利用"的自动化渗透链路。

> 🤖 **本项目 v2.x 由 AI 全程重构**：架构重设计、17 个漏洞模块统一接口化、单元测试与 CI、MCP 服务端，全部由 AI（ZCode）完成，人工负责需求、验收与真实环境实测。

------

## 🛠️ 功能特性

- **多漏洞检测与利用**：17 个漏洞模块统一接口化（无害检测 `Detect` / 受控利用 `Exploit`），新增漏洞只需添加一个文件
- **信息泄露探测**：内置 210+ 端点字典（actuator/swagger/druid），支持 `-d` 合并、`-D` 替换自定义字典
- **双运行形态**：CLI 命令行 + MCP 服务端（stdio），检测与利用能力以结构化 JSON 输出
- **并发与限速**：worker pool + 全局限速 + 上下文取消，长时间运行状态稳定
- **安全闸门**：MCP 模式支持目标白名单（`--scope`）、利用工具独立开关（`--enable-exploit`）、全调用审计日志
- **彩色输出**：终端彩色文本 + 无色结果落盘，批量扫描互不干扰

------

## 🔥 支持的漏洞（17 个）

**RCE / SpEL 注入**

- **CVE-2022-22965** Spring Framework RCE（Spring4Shell）
- **CVE-2022-22963** Spring Cloud Function SpEL RCE
- **CVE-2022-22947** Spring Cloud Gateway SpEL RCE
- **CVE-2018-1273** Spring Data Commons SpEL RCE
- **CVE-2018-1270*

Read full README on GitHub →