lcvvvv/kscan
Kscan
kscan 是一款网络安全扫描器和服务指纹识别工具，用于发现活跃主机和开放端口。它作为网络协议分析器和内网映射工具，能够识别可达网关并分析目标环境的网络攻击面。
该工具通过外部情报服务检索目标主机并验证其可用性，从而集成外部资产发现功能。它还可用作凭据爆破工具，利用自动化的用户名和密码字典测试多种协议的身份验证强度。
该项目涵盖了通过识别软件版本、操作系统和通信协议进行网络安全审计的功能。它支持导入包括 IP 地址和 URL 在内的多种目标格式，并可编译为独立二进制文件以实现便携式执行。
Features
- Network Scanning - Probes IP addresses and URLs to identify open ports and fingerprint running services.
- Network Security Scanners - Provides a comprehensive network security scanner for discovering hosts, ports, and fingerprinting services.
- Multi-Protocol Brute Forcers - Verifies credential strength across multiple network protocols using automated brute-force dictionaries.
- Port Scanning - Identifies open ports on target hosts to determine available services and network entry points.
- Automated Asset Verification - Integrates external intelligence with active scanning to automatically verify and map available network assets.
- External Intelligence Integrators - Queries external security intelligence services to retrieve and enrich the list of target assets for scanning.
- Internal Network Discoverers - Probes private network segments to discover reachable gateways and active hosts within local environments.
- Service Protocol Analyzers - Detects active communication protocols on remote ports regardless of the default port number.
- Network Scanners - Discovers active hosts and open ports to analyze network surface area and reachable gateways.
- Network Security Auditing - Scans for open ports and probes network segments to identify potential entry points and security vulnerabilities.
- Service Fingerprinting - Matches network response headers and payloads against a library of known signatures to identify software versions.
- Credential Brute-Forcing - Tests authentication strength using automated username and password dictionaries across network services.
- Multi-Protocol Probing Engines - Analyzes open ports and traffic patterns to identify active services regardless of the assigned port number.
- Segment Discovery - Detects active local or private network segments to identify reachable gateways and available hosts.
- Search Engine - Retrieves target host addresses by querying search engines using specific keyword dorks.
- Protocol Detection - Identifies the specific communication protocols and services running on target hosts by analyzing open ports.
- Single-Port Protocol Detection - Automatically detects the active network protocol on a port regardless of the standard port number assigned.
- OS Fingerprinting - Identifies remote operating systems by analyzing network packet characteristics such as TTL and TCP window sizes.
- OS Version Detection - Detects the target host operating system by analyzing packet characteristics and response timing.
- External Asset Discovery - Finds and verifies external-facing target hosts and IP addresses using intelligence services and scanning.
- Credential Testing Utilities - Provides utilities to verify credential strength against authentication services using automated dictionary attacks.
- Multi-Protocol Authentication Testing - Tests credentials across a diverse range of network services and protocols simultaneously to verify authentication strength.
- Target System Fingerprinting - Identifies the operating system and hardware characteristics of a target by analyzing network response patterns.
- Reconnaissance Tools - Network scanner focused on service identification.
- Network and Web Reconnaissance - Scans ports, detects protocols, and fingerprints services.
