Package: gscan
English介绍gscan最初是为项目gosam提供基础扫描支持的。后来独立出来成为一个类似nmap的扫描工具，目前正在努力加强和完善中，项目很期待其他开发者的加入。也欢迎您下载发布包来体验它，帮我们测试并反馈问题给我们。特性ARP scanICMP scanTCP port scanDomain supportRandom port supportUDP port scanService discoveryVulnerability discoveryAdaptive binary overflow使用从发布包里下载的对应系统和架构的可执行文件gscan。查看帮助$ gscan help
Gscan
   ____  ______ ____ _____    ____  
  / ___\/  ___// ___\\__  \  /    \ 
 / /_/  >___ \\  \___ / __ \|   |  \
 \___  /____  >\___  >____  /___|  /
/_____/     \/     \/     \/     \/ 
https://github.com/LanXuage/gosam/gscan

A Scanner.

Usage:
  gscan [flags]
  gscan [command]

Available Commands:
  arp         ARP Scanner
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  icmp        ICMP Scanner
  port        PORT Scanner

Flags:
  -A, --arp             with arp scan
  -D, --debug           set debug log level
  -F, --file string     file to output(unrealized)
  -H, --help            help for this command
  -I, --icmp            with icmp scan
  -O, --output string   normal, json or xml(unrealized) (default "normal")
  -T, --timeout int     global timeout(ms) (default 6500)
  -V, --version         version for gscan

Use "gscan [command] --help" for more information about a command.详细命令作用参考这里。简单例子ARP 扫描对本地的整个局域网进行 arp 扫描$gscanarp-a192.168.50.17900:15:5d:fa:d7:e7MicrosoftCorporation192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation
Cost:6.514218807s对指定 IP 进行 arp 扫描$gscanarp-h192.168.50.179192.168.50.17900:15:5d:fa:d7:e7MicrosoftCorporation
Cost:6.500702247s注意：默认超时为6500毫秒，可以使用-T进行指定，单位为毫秒。ICMP 扫描单IP or 网段 主机存活探测$gscanicmp-h192.168.1.1/24IPStatus192.168.1.1Alive
Cost:4.009240208s多目标 存活探测$gscanicmp-h192.168.1.1-h192.168.2.2
IPStatus192.168.1.1Alive192.168.2.2Alive
Cost:4.002214791sTCP Port 扫描对一个 IP 进行全端口探测$gscanport-h192.168.48.1-p0-65535
IPPORTTYPESTATE192.168.48.1135(epmap)tcpopen192.168.48.15091tcpopen192.168.48.17680(pando-pub)tcpopen192.168.48.15040tcpopen192.168.48.15357(wsdapi)tcpopen192.168.48.12179(vmrdp)tcpopen192.168.48.110808tcpopen192.168.48.110809(nbd)tcpopen
Cost:6.00483283s对一个 IP 进行全端口探测，结合 ARP 扫描结果$gscanport-h192.168.48.1-p0-65535-A
IPMACVENDORPORTTYPESTATE192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation2179(vmrdp)tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation135(epmap)tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation5091tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation5357(wsdapi)tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation5040tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation10809(nbd)tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation7680(pando-pub)tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation10808tcpopen
Cost:9.013501996s使用全连接模式对一个 IP 进行全端口探测$gscanport-h192.168.48.1-p0-65535-Af
IPMACVENDORPORTTYPESTATE192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation10808tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation7680(pando-pub)tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation2179(vmrdp)tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation5040tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation10809(nbd)tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation135(epmap)tcpopen192.168.48.100:15:5d:ab:10:3aMicrosoftCorporation5357(wsdapi)tcpopen
Cost:9.01656839s注意：gscan使用的是gopacket模拟的全连接，所以使用-f参数时应该开启本地的防火墙，防止本机系统自动rst连接导致全连接扫描失败。开发从源码构建环境准备debain/ubuntuaptinstalldockerdarwin(MacOS)brewinstalllibpcap-devgolanggit拉取源码gitclonehttps://github.com/LanXuage/gscan.git编译makelinux编译完成会在项目目录下的bin目录生不同架构的linux静态可执行文件。开发规范参考这里感谢开发者YuSec2021项目gopacketconcurrent-mapantscobrazap