Multi-threaded detection of specified IP ranges (specified hosts) or host lists. GUI and command-line modes.
Scan items:
-name --- Get hostname;
-port --- Default port scan;
-ftp --- FTP Banner, anonymous user, weak-password account scan;
-ssh --- SSH Banner scan;
-telnet --- TELNET Banner, weak-password account scan;
-smtp --- SMTP Banner, anonymous user, weak-password account scan;
-finger --- FINGER vulnerability (SunOS/Solaris user list scan);
-iis --- IIS vulnerability scan;
-cgi --- Unix/NT cgi vulnerability scan;
-pop --- POP3 Banner, weak-password account scan;
-rpc --- RPC vulnerability scan;
-ipc --- Windows NT/2000 user list retrieval, weak-password account scan;
-imap --- IMAP Banner, weak-password account scan;
-mssql --- MSSQL weak-password account scan;
-mysql --- MYSQL Version, weak-password account scan;
-cisco --- CISCO weak-password scan;
-plugin --- PLUGIN scan;
-all --- Scan all of the above items;
Other options:
-max <maxthread,maxhost> Specify the maximum number of threads and concurrent hosts, defaulting to 120, 40;
-time <Timed Out> Specify TCP connection timeout in milliseconds, defaulting to 10000;
-sleep <sleeptime> Specify the thread launch interval for ftp/pop/imap/telnet probing, defaulting to 200 milliseconds;
-ping Ping the host before scanning
Report generation:
-report Used to generate scan reports;
Press F8 to interrupt the scan.
HScan v1.20 <Mar 05,2003> Fixed the false positive error in IPC scanning.
HScan v1.20Beta <Feb 18,2003> IPC scan added enumeration of usernames via sid, optimized ftp/pop/imap/telnet probing,
added pre-scan ping check, and modified the GUI interface.
HScan v1.01 <Jan 02,2003> Fixed a bug that consumed a large amount of system resources.
HScan v1.00 <Dec 31,2002> Added RPC scan option, added telnet weak-password probing, MYSQL Version scanning.
HScan v0.70 <Dec 06,2002> Added PLUGIN scan option, fixed the false positive error when probing IMAP/FTP/POP weak passwords with the -all option.
HScan v0.50 <Nov 21,2002> Added hostname retrieval and Telnet scan options, adjusted thread settings, added the use of
the ipc username list to probe Microsoft FTP weak passwords.
HScan v0.30 <Nov 14,2002> Added SSH scanning, added the use of SunOS/Solaris finger to retrieve username lists,
and probe ftp/pop3/imap functionality.
HScan v0.20 <Nov 01,2002> Internal test version.