evilscan – Massive IP Port Scanner

[Fi8sVrs]

evilscan is a Node.js based massive IP Port scanner designed for concurrency, speed and scanning large ranges of IP addresses.

 

 

Features

• Individual IP or IP range scan
• Individual port, ports list, or port range
• Banner grabbing (not fully implemented, works with verbose ports only)
• IAC negotiation
• Reverse dns
• Geolocation information
• Shell or JSON output
• Optional progress details

 

Usage

 

Usage:

 

evilscan <fqdn|ipv4|cidr> [options]

 

Example:

root@debian:~# evilscan 192.168.0.0/24 --port=21-23,80

 

Options:

--port          port(s) you want to scan, examples:
                  --port=80
                  --port=21,22
                  --port=21,22,23,5900-5902
                                                                                
  --reverse       display DNS reverse lookup                                    
 
  --reversevalid  only display results having a valid reverse dns, except if
                  ports specified                                               
 
  --geo           display geoip (free maxmind)                                  
 
  --banner        display banner                                                
 
  --bannerlen     set banner length grabing
                  default 512

  --bannerraw     display raw banner (as a JSON Buffer)                         
 
  --progress      display progress indicator each seconds
                                                                                
  --status        ports status wanted in results (example --status=OT)
                  T(timeout)
                  R(refused)
                  O(open, default)
                  U(unreachable)
                                                                                
  --scan          scan method
                  tcpconnect (full connect, default)
                  tcpsyn (half opened, not yet implemented)
                  udp (not yet implemented)
                                                                                
  --concurrency   max number of simultaneous socket opened
                  default 500
                                                                                
  --timeout       maximum number of milliseconds before closing the connection
                  default 2000
                                                                                
  --display       display result format (json,xml,console)
                  default console
                                                                                
  --json          shortcut for --display=json                                   
 
  --xml           shortcut for --display=xml                                    
 
  --console       shortcut for --display=console                                
 
  --help          display help                                                  
 
  --about         display about                                                 
 
  --version       display version number           

 

 

Sample Output

 

root@debian:~# evilscan 127.0.0.1 --port=0-65535 --banner
127.0.0.1|111||open
127.0.0.1|53||open
127.0.0.1|23|Debian GNU/Linux jessie/sid\r\ndebian login:|open
127.0.0.1|5432||open
127.0.0.1|27017||open
127.0.0.1|28017||open
127.0.0.1|35223||open
127.0.0.1|35491||open
127.0.0.1|39619||open

 

You can download evilscan here: evilscan-master.zip

Or read more here.

 

Source