Fscan

Fscan is an automated penetration testing tool designed for internal network reconnaissance and vulnerability assessment. It functions as a comprehensive security framework that maps network infrastructure, identifies active hosts and services, and detects security weaknesses across internal environments.

The tool distinguishes itself through a modular plugin architecture that allows for extensible security checks and a stateful asset tracking system that maintains an in-memory registry of discovered infrastructure. It incorporates a dedicated credential brute-force engine for testing password strength and supports proxy-aware traffic routing to facilitate operations within segmented or restricted network segments.

Beyond core discovery, the platform provides capabilities for post-exploitation security operations, including system information collection and remote access management. Users can control scan performance through configurable concurrency and rate limits, with options to manage tasks via both command-line execution and a graphical web interface.

Features

Penetration Testing Tools - Functions as an automated penetration testing tool for network reconnaissance, credential brute-forcing, and vulnerability assessment.

Vulnerability Scanners - Automates the identification of open ports, active services, and security weaknesses across internal network infrastructures.

Network Reconnaissance Tools - Automates the identification of network assets, services, and security weaknesses.

Vulnerability Assessment Frameworks - Provides a framework for automated vulnerability assessment and security testing.

Security Assessment Frameworks - Acts as a comprehensive security assessment framework for discovering assets and testing security across internal network environments.

Network Scanning Tools - Scans network surfaces to identify open ports and active services.

Vulnerability Scanning - Executes integrated security checks to detect high-risk vulnerabilities and misconfigurations.

Credential Testing Utilities - Tests credential strength by attempting authentication against target services.

Post-Exploitation Tools - Includes post-exploitation capabilities for system information collection, credential extraction, and remote access management on compromised hosts.

Brute Force Tools - Provides an automated engine for testing authentication strength through credential guessing.

Credential Brute-Forcing - Evaluates system access security by performing automated credential brute-force attempts.

Security Vulnerabilities - Identifies security flaws and misconfigurations across network services.

Brute Force Tools - Fast and efficient network scanning and brute-forcing tool.

Network and Web Reconnaissance - Integrated intranet scanning tool.

Network Scanning - Automated, comprehensive internal network vulnerability scanner.

Scan Orchestration - Optimizes scan performance by configuring concurrency and rate limits.

Web Dashboards - Provides a graphical web interface for managing and monitoring security scans.

Traffic Routing Proxies - Routes scanning traffic through proxies to bypass network restrictions.

Traffic Proxying - Intercepts and tunnels network traffic through proxies for scanning in restricted environments.

Modular Plugin Architectures - Supports extensible security checks through a modular plugin architecture.

Asset Registries - Maintains an in-memory registry of discovered hosts and services to prevent redundant scanning.

Worker Pool Models - Distributes scanning tasks across parallel threads to maximize network throughput.

Event-Driven I/O - Uses non-blocking socket operations to manage high-concurrency network connections efficiently.

shadow1ngfscan

Features

Star history