{"id":13539687,"url":"https://github.com/eviltik/evilscan","last_synced_at":"2025-04-09T04:02:44.034Z","repository":{"id":8571291,"uuid":"10200032","full_name":"eviltik/evilscan","owner":"eviltik","description":"NodeJS Simple Network Scanner","archived":false,"fork":false,"pushed_at":"2022-10-05T23:25:16.000Z","size":13354,"stargazers_count":546,"open_issues_count":9,"forks_count":64,"subscribers_count":20,"default_branch":"master","last_synced_at":"2024-10-23T09:05:50.824Z","etag":null,"topics":["port-scanner","scanner","security-scanner","security-tools"],"latest_commit_sha":null,"homepage":"https://github.com/eviltik/evilscan","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eviltik.png","metadata":{"files":{"readme":"README.md","changelog":"changelog.md","contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null},"funding":{"github":null,"patreon":null,"open_collective":null,"ko_fi":null,"tidelift":null,"community_bridge":null,"liberapay":"eviltik","issuehunt":null,"otechie":null,"custom":null}},"created_at":"2013-05-21T16:19:37.000Z","updated_at":"2024-08-12T19:22:26.000Z","dependencies_parsed_at":"2022-08-29T22:52:06.251Z","dependency_job_id":null,"html_url":"https://github.com/eviltik/evilscan","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eviltik%2Fevilscan","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eviltik%2Fevilscan/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eviltik%2Fevilscan/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eviltik%2Fevilscan/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eviltik","download_url":"https://codeload.github.com/eviltik/evilscan/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247266563,"owners_count":20910836,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["port-scanner","scanner","security-scanner","security-tools"],"created_at":"2024-08-01T09:01:30.389Z","updated_at":"2025-04-09T04:02:44.005Z","avatar_url":"https://github.com/eviltik.png","language":"JavaScript","funding_links":["https://liberapay.com/eviltik"],"categories":["\u003ca id=\"8f92ead9997a4b68d06a9acf9b01ef63\"\u003e\u003c/a\u003e扫描器\u0026\u0026安全扫描\u0026\u0026App扫描\u0026\u0026漏洞扫描","Fingerprint","security-tools","\u003ca id=\"132036452bfacf61471e3ea0b7bf7a55\"\u003e\u003c/a\u003e工具"],"sub_categories":["\u003ca id=\"de63a029bda6a7e429af272f291bb769\"\u003e\u003c/a\u003e未分类-Scanner","Network map"],"readme":"evilscan\n===============\n\n![Node.js CI](https://github.com/eviltik/evilscan/workflows/Node.js%20CI/badge.svg)\n[![npm version](https://badge.fury.io/js/evilscan.svg?1.8.0)](https://badge.fury.io/js/evilscan)\n[![MIT Licence](https://badges.frapsoft.com/os/mit/mit.svg?v=103)](https://opensource.org/licenses/mit-license.php)\n[![Depfu](https://badges.depfu.com/badges/60413e5ea875bbdff97a0b099a948e75/overview.svg)](https://depfu.com/github/eviltik/evilscan?project_id=22885)\n\nNodejs Simple Network Scanner\n\n\nFeatures\n--------\n* individual IP or IP range scan\n* individual port, ports list, or ports range\n* banner grabbing (not fully implemented, works with native verbose ports only)\n* IAC negotiation for telnet\n* reverse dns\n* geolocation information\n* stdout or json output\n* optional progress details (event based)\n\n\nInstall\n-------\n\n\u003e```\n\u003enpm install -g evilscan\n\u003e```\n\n\nUsage: in your code, using events only\n-------------------\n```\nconst Evilscan = require('evilscan');\n\nconst options = {\n    target:'127.0.0.1',\n    port:'21-23',\n    status:'TROU', // Timeout, Refused, Open, Unreachable\n    banner:true\n};\n\nconst evilscan = new Evilscan(options);\n\nevilscan.on('result',data =\u003e {\n    // fired when item is matching options\n    console.log(data);\n});\n\nevilscan.on('error', err =\u003e {\n    throw new Error(data.toString());\n});\n\nevilscan.on('done', () =\u003e {\n    // finished !\n});\n\nevilscan.run();\n```\n\n\nUsage: in your code, using callback and events\n-------------------\n```\nconst Evilscan = require('evilscan');\n\nconst options = {\n    target:'127.0.0.1',\n    port:'21-23',\n    status:'TROU', // Timeout, Refused, Open, Unreachable\n    banner:true\n};\n\nnew Evilscan(options, (err, scan) =\u003e {\n\n    if (err) {\n        console.log(err);\n        return;\n    }\n\n    scan.on('result', data =\u003e {\n        // fired when item is matching options\n        console.log(data);\n    });\n\n    scan.on('error', err =\u003e {\n        throw new Error(data.toString());\n    });\n\n    scan.on('done', () =\u003e {\n        // finished !\n    });\n\n    scan.run();\n});\n\n```\n\nUsage: command line\n-------------------\nUsage: evilscan \u003cfqdn|ipv4|cidr\u003e [options]\n\nExample:\n```\nevilscan 192.168.0.0/24 --port=21-23,80\n```\n\n\nOptions\n-------\n```\n  --port          port(s) you want to scan, examples:\n                  --port=80\n                  --port=21,22\n                  --port=21,22,23,5900-5902\n\n  --reverse       display DNS reverse lookup\n\n  --reversevalid  only display results having a valid reverse dns, except if\n                  ports specified\n\n  --geo           display geoip (free maxmind)\n\n  --banner        display banner\n\n  --bannerlen     set banner length grabing\n                  default 512\n\n  --bannerraw     display raw banner (as a JSON Buffer)\n\n  --progress      display progress indicator each seconds\n\n  --status        ports status wanted in results (example --status=OT)\n                  T(timeout)\n                  R(refused)\n                  O(open, default)\n                  U(unreachable)\n\n  --scan          scan method\n                  tcpconnect (full connect, default)\n                  tcpsyn (half opened, not yet implemented)\n                  udp (not yet implemented)\n\n  --concurrency   max number of simultaneous socket opened\n                  default 500\n\n  --timeout       maximum number of milliseconds before closing the connection\n                  default 2000\n\n  --display       display result format (json,xml,console)\n                  default console\n\n  --infile        fetch fqdn/ipv4/ipv6 target from a file\n  \n  --outfile       dump result in a file\n\n  --json          shortcut for --display=json\n\n  --xml           shortcut for --display=xml\n\n  --console       shortcut for --display=console\n\n  --help          display help\n\n  --about         display about\n\n  --version       display version number\n```\n\nSamples output\n----------------\n\n* Every ports on localhost, grab banner, display only opened ports\n```\neviltik@debian:~# evilscan 127.0.0.1 --port=0-65535 --banner\n127.0.0.1|111||open\n127.0.0.1|53||open\n127.0.0.1|23|Debian GNU/Linux jessie/sid\\r\\ndebian login:|open\n127.0.0.1|5432||open\n127.0.0.1|27017||open\n127.0.0.1|28017||open\n127.0.0.1|35223||open\n127.0.0.1|35491||open\n127.0.0.1|39619||open\ndone, 9 result(s)\n```\n\n* Every ports on localhost, grab banner, display only opened ports, json output, progress status each seconds\n```\neviltik@debian:~# evilscan 127.0.0.1 --port=0-65535 --banner --isopen --istimeout --progress --json\n{\"_timeStart\":\"N/A\",\"_timeElapsed\":\"N/A\",\"_jobsTotal\":65535,\"_jobsRunning\":0,\"_jobsDone\":0,\"_progress\":0,\"_concurrency\":500,\"_status\":\"Starting\",\"_message\":\"Starting\"}\n{\"_timeStart\":1371245901876,\"_timeElapsed\":1031,\"_jobsTotal\":65535,\"_jobsRunning\":500,\"_jobsDone\":7638,\"_progress\":11,\"_concurrency\":500,\"_status\":\"Running\",\"_message\":\"Scanning 127.0.0.1:8138\"}\n{\"_timeStart\":1371245901876,\"_timeElapsed\":2085,\"_jobsTotal\":65535,\"_jobsRunning\":500,\"_jobsDone\":16137,\"_progress\":24,\"_concurrency\":500,\"_status\":\"Running\",\"_message\":\"Scanning 127.0.0.1:16637\"}\n{\"ip\":\"127.0.0.1\",\"port\":111,\"status\":\"open\"}\n{\"ip\":\"127.0.0.1\",\"port\":53,\"status\":\"open\"}\n{\"ip\":\"127.0.0.1\",\"port\":23,\"banner\":\"Debian GNU/Linux jessie/sid\\\\r\\\\ndebian login:\",\"status\":\"open\"}\n{\"ip\":\"127.0.0.1\",\"port\":5432,\"status\":\"open\"}\n{\"_timeStart\":1371245901876,\"_timeElapsed\":3107,\"_jobsTotal\":65535,\"_jobsRunning\":500,\"_jobsDone\":24656,\"_progress\":37,\"_concurrency\":500,\"_status\":\"Running\",\"_message\":\"Scanning 127.0.0.1:25156\"}\n{\"_timeStart\":1371245901876,\"_timeElapsed\":4166,\"_jobsTotal\":65535,\"_jobsRunning\":500,\"_jobsDone\":33166,\"_progress\":50,\"_concurrency\":500,\"_status\":\"Running\",\"_message\":\"Scanning 127.0.0.1:33666\"}\n{\"_timeStart\":1371245901876,\"_timeElapsed\":5215,\"_jobsTotal\":65535,\"_jobsRunning\":500,\"_jobsDone\":41664,\"_progress\":63,\"_concurrency\":500,\"_status\":\"Running\",\"_message\":\"Scanning 127.0.0.1:42164\"}\n{\"ip\":\"127.0.0.1\",\"port\":27017,\"status\":\"open\"}\n{\"ip\":\"127.0.0.1\",\"port\":28017,\"status\":\"open\"}\n{\"_timeStart\":1371245901876,\"_timeElapsed\":6217,\"_jobsTotal\":65535,\"_jobsRunning\":500,\"_jobsDone\":49682,\"_progress\":75,\"_concurrency\":500,\"_status\":\"Running\",\"_message\":\"Scanning 127.0.0.1:50182\"}\n{\"ip\":\"127.0.0.1\",\"port\":35491,\"status\":\"open\"}\n{\"ip\":\"127.0.0.1\",\"port\":35223,\"status\":\"open\"}\n{\"ip\":\"127.0.0.1\",\"port\":39619,\"status\":\"open\"}\n{\"_timeStart\":1371245901876,\"_timeElapsed\":7234,\"_jobsTotal\":65535,\"_jobsRunning\":500,\"_jobsDone\":57732,\"_progress\":88,\"_concurrency\":500,\"_status\":\"Running\",\"_message\":\"Scanning 127.0.0.1:58232\"}\n{\"_timeStart\":1371245901876,\"_timeElapsed\":8182,\"_jobsTotal\":65535,\"_jobsRunning\":0,\"_jobsDone\":65535,\"_progress\":100,\"_concurrency\":500,\"_status\":\"Finished\",\"_message\":\"Scanning 127.0.0.1:65535\"}\n```\n\nTips :\n--------\n**Concurrency and fast scan**\n\nBy default, concurrency is 100. Which is slow when you are scanning large ip range or large port range. You can pass a bigger value using --concurrency option. 1000 is fast by example.\nOn some linux, only 1024 opened sockets are allowed in the same time. To break this limit, you have to update ulimit parameter of your linux first :\n\n```\nulimit -u unlimited\n```\n\nIn all cases, due to #25, you will not be able to scan more than 16580355 ipv4 addresses at the moment.\n\n\n**Pause/unpause**\n\nYou can pause/unpause a running scan by sending SIGUSR2 signal. First time it will pause the process, second time it will unpause it.\n```\nkill -SIGUSR2 19859 # where 19859 is the pid of nodejs process running evilscan\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Feviltik%2Fevilscan","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Feviltik%2Fevilscan","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Feviltik%2Fevilscan/lists"}