Furious IP/Port Scanner

Furious is a fast, lightweight, portable network scanner.

I haven't done any proper performance testing, but a SYN scan of a single host, including all known ports (~6000) will typically take in the region of 4 seconds. On the same machine, nmap took 98 seconds and produced exactly the same results.

Install

You'll need to install libpcap.

On Linux, install libpcap with your package manager
On OSX, brew install libpcap
On Windows, install WinPcap

Then just:

go get -u github.com/liamg/furious

Options

`-s [TYPE]` `--scan-type [TYPE]`

Use the specified scan type. The options are:

Type	Description
`syn`	A SYN/stealth scan. Most efficient scan type, using only a partial TCP handshake. Requires root privileges.
`connect`	A less detailed scan using full TCP handshakes, though does not require root privileges.
`device`	Attempt to identify device MAC address and manufacturer where possible. Useful for listing devices on a LAN.

The default is a SYN scan.

`-p [PORTS]` `--ports [PORTS]`

Scan the specified ports. Defaults to a list of all known ports as provided by IANA.

Ports may be specified using a comma delimited list, and ranges are also allowed.

For example:

--ports 22,80,443,8080-8082

...will scan 22, 80, 443, 8080, 8081, and 8082.

`-t [MS]` `--timout-ms [MS]`

The network timeout to apply to each port being checked. Default is 1000ms.

`-w [COUNT]` `--workers [COUNT]`

The number of worker routines to use to scan ports in parallel. Default is 1000 workers.

`-u` `--up-only`

Only show output for hosts that are confirmed as up.

`--version`

Output version information and exit.

Usage

Furious can be used to:

Find open ports on one or more hosts

Scan a single host:

furious 192.168.1.4

Scan a whole CIDR:

furious 192.168.1.0/24

Scan a mixture of IPs, hostnames and CIDRs

furious -s connect 8.8.8.8 192.168.1.1/24 google.com

Run a SYN (stealth) scan (with root privileges)

sudo -E furious -s syn 192.168.1.1

Run a connect scan as any user

furious -s connect 192.168.1.1

Identify device MAC address and manufacturer within a local network

furious -s device 192.168.1.1/24 -u

Troubleshooting

`sudo: furious: command not found`

If you installed using go, your user has the environment variables required to locate go programs, but root does not. You need to:

sudo env "PATH=$PATH" furious

SYN/Connect scans are slower than nmap!

They're not in my experience, but with default arguments furious scans nearly six times as many ports as nmap does by default.

deancn/furious