Features
Individual IP or IP range scan
Individual port, ports list, or port range
Banner grabbing (not fully implemented, works with verbose ports only)
IAC negotiation
Reverse dns
Geolocation information
Shell or JSON output
Optional progress details
Usage
Usage:
evilscan <fqdn|ipv4|cidr> [options]
1
evilscan <fqdn|ipv4|cidr> [options]
Example:
root@debian:~# evilscan 192.168.0.0/24 --port=21-23,80
1
root@debian:~# evilscan 192.168.0.0/24 --port=21-23,80
Options:
--port port(s) you want to scan, examples:
--port=80
--port=21,22
--port=21,22,23,5900-5902
--reverse display DNS reverse lookup
--reversevalid only display results having a valid reverse dns, except if
ports specified
--geo display geoip (free maxmind)
--banner display banner
--bannerlen set banner length grabing
default 512
--bannerraw display raw banner (as a JSON Buffer)
--progress display progress indicator each seconds
--status ports status wanted in results (example --status=OT)
T(timeout)
R(refused)
O(open, default)
U(unreachable)
--scan scan method
tcpconnect (full connect, default)
tcpsyn (half opened, not yet implemented)
udp (not yet implemented)
--concurrency max number of simultaneous socket opened
default 500
--timeout maximum number of milliseconds before closing the connection
default 2000
--display display result format (json,xml,console)
default console
--json shortcut for --display=json
--xml shortcut for --display=xml
--console shortcut for --display=console
--help display help
--about display about
--version display version number
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
--port port(s) you want to scan, examples:
--port=80
--port=21,22
--port=21,22,23,5900-5902
--reverse display DNS reverse lookup
--reversevalid only display results having a valid reverse dns, except if
ports specified
--geo display geoip (free maxmind)
--banner display banner
--bannerlen set banner length grabing
default 512
--bannerraw display raw banner (as a JSON Buffer)
--progress display progress indicator each seconds
--status ports status wanted in results (example --status=OT)
T(timeout)
R(refused)
O(open, default)
U(unreachable)
--scan scan method
tcpconnect (full connect, default)
tcpsyn (half opened, not yet implemented)
udp (not yet implemented)
--concurrency max number of simultaneous socket opened
default 500
--timeout maximum number of milliseconds before closing the connection
default 2000
--display display result format (json,xml,console)
default console
--json shortcut for --display=json
--xml shortcut for --display=xml
--console shortcut for --display=console
--help display help
--about display about
--version display version number
Sample Output
root@debian:~# evilscan 127.0.0.1 --port=0-65535 --banner
127.0.0.1|111||open
127.0.0.1|53||open
127.0.0.1|23|Debian GNU/Linux jessie/sid\r\ndebian login:|open
127.0.0.1|5432||open
127.0.0.1|27017||open
127.0.0.1|28017||open
127.0.0.1|35223||open
127.0.0.1|35491||open
127.0.0.1|39619||open
1
2
3
4
5
6
7
8
9
10
root@debian:~# evilscan 127.0.0.1 --port=0-65535 --banner
127.0.0.1|111||open
127.0.0.1|53||open
127.0.0.1|23|Debian GNU/Linux jessie/sid\r\ndebian login:|open
127.0.0.1|5432||open
127.0.0.1|27017||open
127.0.0.1|28017||open
127.0.0.1|35223||open
127.0.0.1|35491||open
127.0.0.1|39619||open
You can download evilscan here
0 comments :