An Internet-scale TCP port scanner that can scan the entire Internet in under 5 minutes using asynchronous SYN packets.
MASSCAN is a high-performance, asynchronous TCP port scanner built for scanning massive IP ranges at extreme speeds. It uses its own custom TCP/IP stack to send SYN packets asynchronously, capable of scanning the entire Internet in under 5 minutes. The tool solves the need for rapid, large-scale network reconnaissance, particularly for security researchers and network administrators mapping open ports across vast address spaces.
Network security professionals, penetration testers, and researchers who need to perform fast, wide-ranging port scans across entire subnets or the global Internet. It's also suitable for organizations conducting large-scale network inventory or vulnerability assessments.
Developers choose MASSCAN for its unparalleled speed and scalability in port scanning, leveraging asynchronous I/O and kernel-bypass techniques to achieve millions of packets per second. Its nmap-compatible interface lowers the learning curve, while features like built-in banner grabbing, IPv6 support, and PF_RING integration make it a robust tool for Internet-scale scanning tasks.
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Leverages asynchronous transmission and a custom TCP/IP stack to achieve rates up to 10 million packets per second, enabling Internet-wide scans in minutes, as highlighted in the README's performance claims.
Uses familiar command-line syntax and output formats (XML, JSON, grepable) to reduce the learning curve for network professionals, with options like --echo for configuration reuse.
Completes TCP connections to retrieve application banners for 12 protocols including HTTP, SSH, and SSL, adding value beyond mere port detection without external tools.
Scans both address families simultaneously without special modes, simplifying dual-stack reconnaissance, as demonstrated in usage examples with mixed IP ranges.
Requires assigning a separate IP address or intricate firewall rules to prevent conflicts with the system's TCP/IP stack, adding operational overhead and risk of network disruption, as warned in the README.
Only supports banner checking for a fixed list of 12 protocols, lacking the extensive service detection, version scanning, and scripting engine of tools like nmap for deeper analysis.
Scans must target IP addresses directly, as MASSCAN does not resolve domain names, which complicates scanning dynamic or named hosts and reduces usability for ad-hoc tasks.
Achieves significantly lower packet rates on Windows and macOS (around 300,000 packets/second) compared to Linux (1.6 million packets/second), limiting efficiency in heterogeneous environments.
Masscan is an open-source alternative to the following products: