SecNN/AiScan-N

AiScan-N 来了！这是一款基于人工智能驱动的Ai自动化网络安全（运维）工具，专注于网络安全评估、漏洞扫描、运维、应急响应、渗透测试自动化，Ai大模型工具集【CLI Agent】 ，Ai驱动的安全检测技术，提升安全测试（运维）效率，专为企业和个人用户打造，尤其适合初学者（小白）快速上手使用，让你轻松迈入智能安全攻防时代！适用场景 ：如（红队演练、CTF比赛、Web应用渗透测试、内网横向移动、密码破解与暴力攻击、流量分析与威胁检测、APT攻击模拟、漏洞赏金挑战等场景）🎥演示视频（文章中）：https://mp.weixin.qq.com/s/7lsUdbrxkDy4P5pZhEWv7Q

What it solves

AiScan-N is an AI-powered automation tool for cybersecurity and network operations. It aims to reduce the manual effort and time required for security assessments, vulnerability scanning, and penetration testing, making these complex tasks more accessible to beginners and more efficient for professionals.

How it works

The tool operates as a CLI Agent that leverages Large Language Models (LLMs) to automate security tasks. It can connect to various LLM backends, including free third-party APIs, paid cloud services, locally deployed offline models (such as DeepSeek-R-14B or Qwen3), or dedicated APIs provided by SecNN. The agent can interact with the system to execute security tools (like nmap, fscan, dirsearch, and sqlmap) and analyze files (such as PCAP logs, APKs, and source code) to identify vulnerabilities and generate reports.

Who it’s for

  • Security Researchers and Penetration Testers: To automate repetitive scanning and reconnaissance tasks.
  • Enterprise Security Teams: For continuous security assessments and vulnerability management.
  • CTF Players: To automate the decryption and solving of Capture The Flag challenges.
  • Beginners: Users with zero foundation in security who want to enter the field of intelligent security defense and attack.

Highlights

  • Multi-Model Support: Compatible with various LLMs, including local offline models for secure, air-gapped environments.
  • Cross-Platform: Runs on Windows, Linux, MacOS, and WSL.
  • Automated Security Tasks: Capable of performing vulnerability scanning, code auditing, APK reverse analysis, and malicious traffic analysis.
  • ** uma CLI Agent**: Allows users to trigger complex security workflows via simple natural language prompts.
  • Tool Integration: Can call external security tools like fscan and nmap to perform active network scanning.

Related

  • Project
    openai/codex-security

    A CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in code using LLM-powered scanning.

  • Project
    asamassekou10/ship-safe

    An AI security scanner that detects vulnerabilities in application code, AI agents, and supply chains, specifically targeting risks like prompt injection and agent hijacking.

  • Project
    cdxiaodong/cain-agent

    An AI penetration testing engineer for authorized security assessments that automates vulnerability discovery and cloud misconfiguration analysis with strict scope enforcement.

  • Project
    NVIDIA/SkillSpector

    A security scanner for AI agent skills that detects vulnerabilities and malicious patterns using static analysis and LLM-based semantic evaluation.

  • Project
    GH05TCREW/pentestagent

    An AI-powered penetration testing framework that automates security assessments using autonomous agents, multi-agent orchestration, and MCP-integrated security tools.