quicmap

(Pretty) fast QUIC service scanner

quicmap is a relatively fast QUIC service scanner that removes the need to use multiple tools to identify QUIC services, protocol version in use as well as supported ALPN's.

Main features

Scan arbitrary hosts, IP addresses, networks and ports and identify QUIC services
Run arbitray number of threads (50 by default)
Supports binary searching for ALPN's to speed up the process
Nice progress bar!

Installation

git clone https://github.com/bojanisc/quicmap.git
cd quicmap
pip3 install -r requirements.txt
python3 quicmap.py -h

-h, --help

usage: quicmap.py [-h] [-p PORTS] [-t TIMEOUT] [-c CONCURRENCY] hosts

quicmap.py - script that does QUIC scanning

positional arguments:
  hosts                 The target host(s), comma separated hosts or IP range(s)

options:
  -h, --help            show this help message and exit
  -p PORTS, --ports PORTS
                        Port range (e.g., '80', '1-1024', '80,443,1000-2000'). Default is '1-1000'
  -t TIMEOUT, --timeout TIMEOUT
                        Timeout for a UDP connection in seconds. Default is 5 seconds.
  -c CONCURRENCY, --concurrency CONCURRENCY
                        Number of concurrent connections to spawn. Default is 50.

Examples

1) Scan Youtube and Facebook for supported procotols

python3 quicmap.py -p 443 youtube.com,facebook.com
100%|█████████████████████████████████████████████████████████████████████████████████████████| 2/2 [00:01<00:00,  1.47it/s]
endpoint        : youtube.com
port            : 443
server_versions : 0x1, 0x5aba0aba, 0xff00001d
ALPN            : h3 (HTTP/3)

endpoint        : facebook.com
port            : 443
server_versions : 0xfaceb002, 0xfaceb00e, 0xfaceb011, 0xfaceb013, 0xfaceb010, 0x1, 0xfaceb003
ALPN            : h3 (HTTP/3)

If you notice any issues with the software, please open up an issue. Pull requests are welcome.