asaotomo/FofaMap
FofaMap v2.0 is an AI-driven red team asset mapping agent that interprets natural language requests, self-corrects query syntax on zero results, and auto-generates vulnerability scan strategies.

The agent accepts human-language commands to explore internet-facing assets, leveraging an LLM to generate FOFA syntax, analyze results, and decide whether scanning is worthwhile. Its self-reflection mechanism automatically relaxes query constraints when no results are returned, then triggers Nuclei scanning with AI-generated parameters. It connects to AI platforms via MCP protocol for seamless integration with tools like Cursor and Claude.
Frequently asked
- What is asaotomo/FofaMap?
- FofaMap v2.0 is an AI-driven red team asset mapping agent that interprets natural language requests, self-corrects query syntax on zero results, and auto-generates vulnerability scan strategies.
- Is FofaMap open source?
- Yes — asaotomo/FofaMap is open source, released under the Apache-2.0 license.
- What language is FofaMap written in?
- asaotomo/FofaMap is primarily written in Python.
- How popular is FofaMap?
- asaotomo/FofaMap has 691 stars on GitHub.
- Where can I find FofaMap?
- asaotomo/FofaMap is on GitHub at https://github.com/asaotomo/FofaMap.