Home

下一页

An automated asset collection system built on the "Asset Breeding Engine" that helps you quickly identify and map your organization's complete attack surface.

Z-Sans

Z-Sans is a powerful cybersecurity tool focused on automated asset discovery and breeding. Starting from a small set of seed assets (domains or URLs), Z-Sans automatically discovers related assets such as domains, IPs, URLs, ports, and JavaScript resources, and produces detailed asset reports.

How It Works

At the core of Z-Sans is a Breeding Engine:

  1. You provide a small set of seed assets (-d example.com or -u https://example.com)
  2. The engine hands each asset to its corresponding Breeder and Tool
  3. New assets discovered by breeders are added to the AssetGraph and the queue, continuing the next breeding round
  4. Once the queue is empty, the engine outputs the complete asset topology report

Features

  • Multi-type asset support: domains, IPs, URLs, ports, and JS files
  • Configurable scan strategies: priority-first, depth-first, breadth-first, chronological
  • Rich tool integration: subfinder, naabu, JSfinder, EHole, WhatWeb, DNS resolution
  • Flexible output formats: JSON, CSV, GraphML, and self-contained HTML reports
  • Internationalization: built-in Chinese and English language support
  • Modular design: core functionality is separated from tool implementations, easy to extend
  • Checkpoint & resume: progress is saved to checkpoints; use --resume to restore interrupted scans
  • Watch mode: --watch rescans periodically, reports asset changes, and supports Webhook push
  • Web console: project browsing, real-time task logs, configuration/plugin management
  • Plugin system: event-driven plugin framework supporting custom reports, external intelligence, Webhook notifications, and more

Quick Start

pip install -r requirements.txt

# Scan a domain with default configuration
python main.py -d example.com

# You will find a timestamped directory under output/
# Containing an interactive HTML report and JSON/CSV/GraphML asset graphs

See Quick Start for full instructions.

Documentation Index

Section Description
Quick Start Installation, first scan, example output
Core Concepts Asset model, breeding engine, priority queue, asset graph
CLI Reference All command-line arguments and usage
Configuration Reference Full field documentation for breeding-config.yaml
Output & Reports Output formats, HTML reports, file structure
Web Console Browser-based management interface
Plugin Development Writing event-driven plugins
Events Reference Reference table of 8 event hooks
Architecture Overview Module structure and extension methods
Tool Integration External tools and internal implementations
FAQ Frequently asked questions
Changelog Version history

License

This project is released under the MIT License. Please read the Disclaimer before use.

Quick Start