awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
XTLS avatar

XTLS/RealiTLScanner

0
View on GitHub↗
2,993 stars·222 forks·Go·mpl-2.0·16 views

RealiTLScanner

RealiTLScanner is a TLS configuration scanner and network security auditor designed to identify security settings across IP addresses and domains. It functions as a target discovery tool that analyzes TLS configurations to find compatible endpoints and evaluate server security postures.

The project distinguishes itself as a geolocation-enhanced network scanner, appending geographic location data and country codes to discovered security configurations using a local location database. This allows for the geographic mapping of servers by combining TLS scan results with GeoIP data.

The tool supports internet asset discovery through multi-source target imports, including the extraction of domains from URLs and the resolution of CIDR ranges into discrete addresses. It manages these tasks using a concurrent worker pool and asynchronous probe dispatch to analyze targets at scale.

Scan results and security metadata are processed through a data pipeline and exported into structured formats, such as CSV files, for further analysis.

Features

  • Network Security Auditing - Audits network security postures by detecting TLS configurations across wide network blocks and domain lists.
  • Configuration Analysis - Provides comprehensive scanning of IP addresses and domains to analyze TLS security settings and server configurations.
  • IP Geographic Mapping - Maps the physical location of servers by combining TLS scan results with IP-to-location data.
  • Geo-Resolution Lookups - Appends geographic coordinates and country codes to scan results by matching IP addresses against a local location database.
  • Network Address Resolution - Resolves domain names and CIDR blocks into discrete IP addresses to create a comprehensive target list.
  • Multi-Format Target Scanning - Accepts multiple input formats, including CIDR ranges and URLs, to probe a wide array of targets.
  • Target Expansion - Provides functionality to resolve CIDR network range notations into individual IP addresses for comprehensive scanning.
  • Asset Discovery Tools - Enumerates internet-facing infrastructure by converting CIDR ranges and URLs into structured target lists.
  • Geolocation-Enhanced Security Scanners - Combines network scanning for security configurations with automatic geographic location tagging for discovered servers.
  • Network Encryption Auditors - Audits the strength and configuration of network encryption across thousands of target addresses.
  • TLS Configuration Scanning - Identifies and analyzes TLS security settings across multiple IP addresses and domains to find compatible endpoints.
  • TLS Target Discovery - Extracts domains from URLs and resolves network blocks to build comprehensive lists of TLS-enabled servers.
  • TLS Security Auditing - Identifies TLS security settings for domains and IP addresses using customizable probes and concurrent scanning.
  • Data Enrichment - Enhances raw scan results by augmenting IP targets with geographic location metadata.
  • Asynchronous Probing - Implements non-blocking network probes to efficiently analyze thousands of TLS endpoints in parallel.
  • Domain Extraction Parsers - Isolates hostnames and domains from crawled web pages to identify potential network scanning targets.
  • TLS Protocol Identification - Searches for servers with specific security protocols to build lists of compatible endpoints for network tunneling.
  • Data Processing Pipelines - Employs a modular pipeline to stream scan results through sequential stages of geographic enrichment and metadata formatting.
  • Concurrent Request Pools - Uses a capped resource pool of goroutines to manage simultaneous network requests and avoid system exhaustion.

Star history

Star history chart for xtls/realitlscannerStar history chart for xtls/realitlscanner

How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Frequently asked questions

What does xtls/realitlscanner do?

RealiTLScanner is a TLS configuration scanner and network security auditor designed to identify security settings across IP addresses and domains. It functions as a target discovery tool that analyzes TLS configurations to find compatible endpoints and evaluate server security postures.

What are the main features of xtls/realitlscanner?

The main features of xtls/realitlscanner are: Network Security Auditing, Configuration Analysis, IP Geographic Mapping, Geo-Resolution Lookups, Network Address Resolution, Multi-Format Target Scanning, Target Expansion, Asset Discovery Tools.

What are some open-source alternatives to xtls/realitlscanner?

Open-source alternatives to xtls/realitlscanner include: jaykali/maskphish — Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network… rustscan/rustscan — RustScan is a high-speed TCP network scanner written in Rust, designed for security reconnaissance and network… projectdiscovery/naabu — Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to… cellularprivacy/android-imsi-catcher-detector — This project is a mobile network security auditor and IMSI catcher detector designed to identify fake base stations… testssl/testssl.sh — testssl.sh is a network security tool and SSL/TLS security scanner used to audit server configurations. It functions… owasp/nettacker — Nettacker is an automated penetration testing framework designed to orchestrate reconnaissance, port scanning, and…

Open-source alternatives to RealiTLScanner

Similar open-source projects, ranked by how many features they share with RealiTLScanner.
  • jaykali/maskphishjaykali avatar

    jaykali/maskphish

    3,020View on GitHub↗

    Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe

    Shellhackhackinghacking-tool
    View on GitHub↗3,020
  • rustscan/rustscanRustScan avatar

    RustScan/RustScan

    19,932View on GitHub↗

    RustScan is a high-speed TCP network scanner written in Rust, designed for security reconnaissance and network mapping. It functions as an automated port discovery engine that identifies open ports on remote hosts using IPv6 addresses, CIDR ranges, or bulk input files. The tool is built for rapid surface area discovery, utilizing parallel port processing and OS-aware performance optimizations to identify active services. It allows for scan precision tuning through adjustable connection timeout thresholds and concurrent request controls to balance speed and accuracy. The system integrates wit

    Rust
    View on GitHub↗19,932
  • projectdiscovery/naabuprojectdiscovery avatar

    projectdiscovery/naabu

    5,766View on GitHub↗

    Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet

    Gocdn-exclusionhacktoberfestnmap
    View on GitHub↗5,766
  • cellularprivacy/android-imsi-catcher-detectorCellularPrivacy avatar

    CellularPrivacy/Android-IMSI-Catcher-Detector

    5,335View on GitHub↗

    This project is a mobile network security auditor and IMSI catcher detector designed to identify fake base stations and surveillance hardware attempting to intercept mobile traffic. It functions as a radio interface analyzer and cellular tower mapping tool, monitoring connections to detect unauthorized network infrastructure. The system distinguishes itself by combining real-time threat level monitoring with the ability to identify silent SMS and stealth communications used for device tracking. It analyzes ciphering status to detect forced network downgrades to weaker encryption standards and

    Java
    View on GitHub↗5,335
  • See all 30 alternatives to RealiTLScanner→