lcvvvv/kscan

Health v2 · maintenance only

Adoption not part of the score

4287 stars · 547 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Kscan is an all-in-one reconnaissance scanner written in pure Go that combines port scanning, protocol detection, service/application fingerprinting, and brute-force authentication. It supports 1200+ protocols, 10000+ protocol fingerprints, 20000+ application fingerprints, and brute-forcing for over 10 protocols.

Use cases

• scan a target IP range for open ports and identify services
• fingerprint web applications and grab page titles from URLs
• detect protocols on non-standard ports instead of guessing by port number
• brute-force credentials for services like SSH, SMB, and databases
• discover live hosts in a C-segment or private network automatically
• pull asset lists from FOFA and scan them for exposed services

When to choose

• you need a single lightweight binary for port scanning plus service and web fingerprinting
• you want accurate protocol detection rather than port-number-based assumptions
• you are doing authorized red team or pentest reconnaissance in Go-friendly environments
• you want to chain FOFA asset discovery with active scanning

When to avoid

• you need a full vulnerability scanner with exploit modules rather than asset discovery
• you require a GUI or web dashboard instead of a command-line tool
• you need stealthy, slow, IDS-evading scanning
• the project has not released since August 2023 and you need actively maintained tooling

Facets

cli-tool · maturity maintenance

security networking search-engine http-client security penetration-testing networking developer-tools windows cli go port-scanner fingerprinting brute-force red-team pentest service-detection fofa reconnaissance linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="lcvvvv/kscan")