zmap/zgrab2

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2167 stars · 373 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ZGrab2 is a fast, modular application-layer network scanner written in Go, designed for large Internet-wide surveys in tandem with ZMap. It performs L7 protocol handshakes (TLS, HTTP, SSH, databases, and many more) and outputs detailed transcripts for offline analysis.

Use cases

• scan the internet for servers running specific protocols
• grab TLS handshake details from many hosts
• perform application-layer banner grabbing at scale
• survey HTTP services across IP ranges
• collect protocol fingerprints for security research
• follow up on ZMap scan results with L7 handshakes

When to choose

• you need to scan large numbers of hosts at the application layer
• you want detailed protocol handshake transcripts for offline analysis
• you already use ZMap and need L7 follow-up scanning
• you need a modular scanner supporting many protocols

When to avoid

• you need an interactive exploitation or penetration-testing tool
• you want a GUI-based vulnerability scanner
• you need authenticated or brute-force scanning, which ZGrab refuses by design

Facets

cli-tool · maturity active

security networking http-client developer-tools security networking penetration-testing windows go cli network-scanner application-layer-scanning internet-scanning tls protocol-scanner zmap command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="zmap/zgrab2")