SecurityCipher
Home Blog About Us
Resources ▼
✅ Security Checklists Hub 🗺️ Penetration Testing Roadmap 🤖 OWASP Top 10 for LLM Applications 🧠 LLM AI Security Checklist 🛠️ Security Tools 🎯 Penetration Testing Tricks 📄 Secure Code Explain 📖 Vulnerability Explain ☁️ AWS Cloud Security Checklist
My Resume
Our ServicesServices
New On-Call Drive Drive the neon city, jack in, and clear security tickets Play now →
← Security Tools View on GitHub

afrog

Vulnerability scanner focused on reproducibility and PoC verification.

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming

English • 中文

Go version Downloads Contributors Release Issues

What is afrog

afrog is a high-performance vulnerability scanner with support for built-in and custom PoCs. It is designed for fast verification, low false positives, and practical workflows across web targets, network services, PoC authoring, and SDK-based integration.

Install

For source builds or go install, use Go 1.27 or later.

Binary release

Download the latest release from:

  • https://github.com/zan8in/afrog/releases/latest

Build from source

git clone https://github.com/zan8in/afrog.git
cd afrog
go mod tidy
go build -o afrog cmd/afrog/main.go
./afrog -h

Go install

go install -v github.com/zan8in/afrog/v3/cmd/afrog@latest

Quick start

Scan a single target:

afrog -t https://example.com

Scan multiple targets from a file:

afrog -T targets.txt

Run only high and critical checks:

afrog -T targets.txt -S high,critical

Documentation

The documentation is being reorganized into a structured bilingual tree. Chinese content is currently the most complete; English paths are already reserved and will be filled incrementally.

  • Chinese docs index: docs/zh/index.md
  • English docs index: docs/en/index.md
  • PoC quickstart: docs/zh/poc/quickstart.md
  • SDK quickstart: docs/zh/sdk/quickstart.md
  • Contributors: docs/zh/community/contributors.md

PoC Contributors

PoC contributors are a core part of the afrog community. This section stays in the repository README on purpose so contributor recognition remains visible in the first place people land.

For contribution guidance, see the Chinese contributor guide. For a stable docs entry, see docs/zh/community/contributors.md.

Contributor avatar
不动明王
Contributor avatar
雪山
Contributor avatar
White-hua
Contributor avatar
123456
Contributor avatar
ifofor
Contributor avatar
Air
Contributor avatar
执着
Contributor avatar
purple-WL
Contributor avatar
throat
Contributor avatar
Secx
Contributor avatar
冰河
Contributor avatar
Sheen
Contributor avatar
a16
Contributor avatar
A1
Contributor avatar
rainbow2972
Contributor avatar
wuha0926
Contributor avatar
茄子
Contributor avatar
lei_sec
Contributor avatar
G-H-Z
Contributor avatar
wh1te
Contributor avatar
清月
Contributor avatar
york
Contributor avatar
7eleven.eth
Contributor avatar
Double...
Contributor avatar
ICEY_
Contributor avatar
lazy
Contributor avatar
free2e
Contributor avatar
m4sk
Contributor avatar
沉默树人
Contributor avatar
陈麻子
Contributor avatar
leonardo-o1
Contributor avatar
江湖人称魏...
Contributor avatar
若兮风
Contributor avatar
-sudo
Contributor avatar
Cuerz
Contributor avatar
laohuan12138
Contributor avatar
exp0l0zzz
Contributor avatar
1derian
Contributor avatar
CMDB-M
Contributor avatar
li1u
Contributor avatar
oxsonder
Contributor avatar
Zhiliao
Contributor avatar
段
Contributor avatar
HuiTaiL
Contributor avatar
Miracles666
Contributor avatar
Observer
Contributor avatar
黑熊
Contributor avatar
TryA9ain
Contributor avatar
fgz00
Contributor avatar
Y3y1ng
Contributor avatar
二大爷
Contributor avatar
Wans
Contributor avatar
海边的小米粥
Contributor avatar
Wen
Contributor avatar
SULAB
Contributor avatar
ZacharyZcR
Contributor avatar
Superhero
Contributor avatar
k5rC85Lma

Examples

  • Basic scanner
  • Async scanner
  • OOB scanner
  • Progress scanner
  • Full output
  • SDK portscan
  • Vulnerability scan
  • Port scan

Project links

  • Releases: https://github.com/zan8in/afrog/releases
  • Wiki archive: https://github.com/zan8in/afrog/wiki

Community

To join the afrog WeChat discussion group, add the afrog account and mark it as afrog.

discussion group

404Starlink

afrog is part of 404Starlink.

Disclaimer

This tool is intended only for legally authorized security work. Do not scan unauthorized targets. The user is solely responsible for any misuse or illegal activity.

Penetration Testing Services

penetration Testing Services

Web Application Security Quiz

Web Application Security Quiz

Daily Bug Bounty Writeups - Twitter

Daily Bug Bounty Writeups

Download our Latest Android Application

Guide for Penetration Testing

Daily Bug Bounty Writeups - Telegram

Daily Bug Bounty Writeups

Author

Piyush
Senior Product Security Engineer

Ethical Hacker || Penetration Tester || Gamer || Blogger || Product Security Engineer || AI Security

READ ARTICLE

Donate

Buy me a Coffee

Recent Posts

  • Cloud Misconfig Bounty Hunting in 2026: Open Buckets, Firebase, and Secrets
    Cloud Misconfig Bounty Hunting in 2026: Open Buckets, Firebase, and Secrets
    September 8, 2026/
    0 Comments
  • DevSecOps From Laptop to Production: A Practical Security Pipeline Guide
    DevSecOps From Laptop to Production: A Practical Security Pipeline Guide
    August 27, 2026/
    0 Comments
  • The CVE Flood Is a Lie: How to Hunt When AI Dumps 36% More Bugs But Exploitation Only Grows 10%
    The CVE Flood Is a Lie: How to Hunt When AI Dumps 36% More Bugs But Exploitation Only Grows 10%
    August 25, 2026/
    0 Comments

Follow Us

SecurityCipher

Practical security guides, vulnerability deep-dives, and hands-on resources for bug bounty hunters and penetration testers.

Useful Links

  • Security Checklists
  • Cybersecurity Jobs
  • Blogs
  • About
  • Contact
© 2026 SecurityCipher. All rights reserved. Privacy Policies · Terms & Conditions