Kscan: Simple Asset Mapping Tool

Kscan – Simple Asset Mapping Tool

kscan is an asset mapping tool that can perform port scanning, TCP fingerprinting, and banner capture for specified assets, and obtain as much port information as possible without sending more packets. It can perform automatic brute force cracking on scan results and is the first open-source RDP brute force cracking tool on the go platform.

At present, there are actually many tools for asset scanning, fingerprint identification, and vulnerability detection, and there are many great tools, but Kscan actually has many different ideas.

• Kscan hopes to accept a variety of input formats, and there is no need to classify the scanned objects before use, such as IP, URL address, etc. This is undoubtedly an unnecessary workload for users, and all entries can be normal Input and identification. If it is a URL address, the path will be reserved for detection. If it is only IP:PORT, the port will be prioritized for protocol identification. Currently, Kscan supports three input methods (-t,–target|-f,–fofa|–spy).

• Kscan does not seek efficiency by comparing port numbers with common protocols to confirm port protocols, nor does it only detect WEB assets. In this regard, Kscan pays more attention to accuracy and comprehensiveness, and only high-accuracy protocol identification, in order to provide good detection conditions for subsequent application layer identification.

• Kscan does not use a modular approach to do pure function stacking, such as a module obtains the title separately, a module obtains SMB information separately, etc., runs independently, and outputs independently, but outputs asset information in units of ports, such as ports If the protocol is HTTP, subsequent fingerprinting and title acquisition will be performed automatically. If the port protocol is RPC, it will try to obtain the hostname, etc.

Kscan currently has 3 ways to input targets

• -t/–target can add the –check parameter to fingerprint only the specified target port, otherwise, the target will be port scanned and fingerprinted

• –spy can add the –scan parameter to perform port scanning and fingerprinting on the surviving C segment, otherwise only the surviving network segment will be detected

• -f/–fofa can add –check to verify the survivability of the retrieval results, and add the –scan parameter to perform port scanning and fingerprint identification on the retrieval results, otherwise only the fofa retrieval results will be returned

Download & Use

Copyright (C) 2022 lcvvvv