Free port scan software for linux

Port Scanner provides a tool to check for open ports.

Port Scanner will try to connect on every port you define for a particular host. If a connection is made, it will try to read any data returned.

This product is intended for individuals to test their own equipment for weak security, and the author will take no responsibility if it is put to any other use.

Amazon sell many books on Security that will enhance your ability to keep your computer secure.

The Windows version has been withdrawn. Apologies for this, but it is too popular and uses my bandwidth up too quickly. If anyone want to host the binary for me, I will happily post a link here. It should also be possible to compile Version 2.1 for Windows.

Whats New in this release:

.(QT) Takes multiple port ranges.
.Minor bugfixes.

Just Another Port Scanner (JAPS) is an easy to use, bare-bones TCP port scanner. JAPS requires the GTK+ library to run. I created JAPS because I felt it would be a fun project and I wanted to learn GTK+ programming basics.

To compile an install JAPS just type make.

Todo
Add subnet scanning
Add progress bar
Display service name next to port number in results box
If you have any suggestions please contact me. 1

jPortScanner is a Java port scan utility.
Requires Java 1.4 or greater (for its use of regular expressions)
Installation:
gzip -d jPortScanner.1.0.4.tar.gz
tar -xvf jPortScanner.1.0.4.tar
cd jPortScanner.1.0.4
make
make install
To run type:
jPortScanner
Enhancements:
- which was causing localhost scans
- added Makefile/Install script
- Fixed bug with timeouts

proxyScan.pl is a Perl script for security penetration testing, to scan for hosts and ports through a Web proxy server.

Features include various HTTP methods such as GET, CONNECT, HEAD as well as host and port ranges.

arp-scan sends ARP (Address Resolution Protocol) queries to the specified targets, and displays any responses that are received.
It allows any part of the outgoing ARP packets to be changed, allowing the behavior of targets to non-standard ARP packets to be examined. The IP address and hardware address of received packets are displayed, together with the vendor details.
These details are obtained from the IEEE OUI and IAB listings, plus a few manual entries. It includes arp-fingerprint, which allows a system to be fingerprinted based on how it responds to non-standard ARP packets.
Enhancements:
- Support for Sun Solaris was added.
- This was tested on Solaris 9 (SPARC).
- The following new arp-fingerprint patterns were added for ARP fingerprinting: IOS 11.2, 11.3, and 12.4; ScreenOS 5.1, 5.2, 5.3, and 5.4; Cisco VPN Concentrator 4.7; AIX 4.3 and 5.3; Nortel Contivity 6.00 and 6.05; Cisco PIX 5.1, 5.2, 5.3, 6.0, 6.1, 6.2, 6.3, and 7.0.
- IEEE OUI and IAB MAC/Vendor files were updated.
- HSRP MAC address was added to mac-vendor.txt.

AutoScan is a utility for network exploration.
The objective of the program is to post the list of all equipment connected to the network. A list of ports preset is scanned for each equipment.
Main features:
- Automatic network discovery
- Entire subnets can be scanned simultaneously without human intervention
- Addition time-reality of the new machines put on the network
- Detection of the OS, brand and model known (Possibility to add an unknown equipment in the database)
- Ability to save the network state
- A Samba share browser
- A Nessus client
- For each machine, one can launch a script (ex:ping, nmap) and display the result
- For each port, one can launch an application (ex:rdesktop for the terminal server service)

P3Scan is a full transparent proxy server for email clients. It runs on a Linux box with iptables (for port redirection).

P3Scan can be used to provide email scanning from the Internet to any internal network, and is ideal for helping to protect your "Other OS" LAN from harm, especially when used in conjunction with a firewall and other Internet proxy servers.

It is designed to enable scanning of incoming email messages for viruses, worms, trojans, spam, and harmful attachments. Because viewing HTML email can enable a spammer to validate an email address (via Web bugs), it can also provide HTML stripping.

You have to set up a port redirection with iptables so that all connections from e.g. inside your office to any POP3/POP3S/SMTP server outside in the world will not leave your router, but come to a local port, on which P3Scan listens.

P3Scan receives from the Linux kernel the original destination (the email server outside in the world) and will connect to them.

All data we receive from the client will be sent to the server, and vice versa. With a little enhancement: we parse the necessary parts of the protocol and when an email is sent from the server, we store it into a file, invoke our scanning, and send it along if it is good, or in the event of POP3/POP3S we replace it with a virus notification and optionally delete the infected message. For infected SMTP messages, we reject the message.

It should be possible to use all scanners using the scannertype=basic.

Also, P3Scan provides scannertype=avpd for high-speed scanning using Kaspersky Anti-Virus for Linux, every C programmer can easily adept other scan-daemons (trophie, sophie, antivir, ...).

Neither the client nor the server has to be configured, none of them will take notice that theres a mail scanner (except the client when he gets a virus notification or if he looks into the header, and the server gets our ip as source).

Parallel Network Scanner provides a fast network services scanner.
pnscan is a scanner for TCP network services. It uses multithreading to increase its speed.
pnscan tries to be smart as to how many threads to start - it will dynamically start only as many as is needed to make progress in the scan - up to a maximum either as specified with the "-n" command line option, or 8 minus the maximum number of available file descriptors (pnscan tries to increase
it to the max limit automatically) - or any internal limit on the system (Linux normally only allows 256 threads).
Host ranges can be specified both as a CIDR - network name or IP address / mask bit length and as a range. When using CIDR notation - the first and last address is ignored (normally used for broadcasts)
Some examples:
192.168.0.0/24
192.160.0.1:192.160.0.254
arpanet/8
USAGE - EXAMPLES
# Scan network 192.168.0.0/24 for SSH daemons on port 22
pnscan 192.168.0.0/24 22
pnscan 192.168.0.1:192.168.0.254 ssh
# Scan hosts 192.168.10.34 ... 98 for IDENT servers, max 8 threads
pnscan -n8 -w"VERSION" 192.168.10.34:192.168.10.98 113
# Scan host 127.0.0.1 for WWW servers on all ports
pnscan -w"HEAD / HTTP/1.0rnrn" -r"Server:" 192.168.0.32 1:65525
pnscan -w"HEAD / HTTP/1.0rnrn" -r"Server:" localhost 1:65525
# Send binary data and expect the binary sequence FF 00 FF on port 145.
pnscan -W"05 5A 37" -R"FF 00 FF" 192.168.0.32 145
# Scan for Roxen servers and print the whole Server-line
pnscan -l -w"HEAD / HTTP/1.0rnrn" -r"Roxen" localhost 1:65525
# Scan for pidentd servers and try to locate the version
pnscan -w"VERSION" 192.160.0.0/24 113
# Scan network arpanet/24 for daytime servers and sort them IP-numerically
pnscan arpanet/10 daytime | ipsort
# Read host (&port) lines from stdin and scan the selected hosts for SSH
echo 192.160.10.11 ssh | pnscan -v
echo 192.160.10.12 | pnscan 22
Enhancements:
- pnscan.sgml Added the other options implemented in pnscan.c.
- pnscan.c: Modified the threads startup code to dynamically only start as many threads as is needed.