Deep Focus

A high-performance network reconnaissance tool for discovering and fingerprinting services across IP ranges. Built for security researchers and network administrators.

Table of Contents

1. Overview
2. Features
3. Requirements
4. Installation
5. Usage
6. Configuration
7. Understanding Export Logs
8. Target Selection Guide
9. Troubleshooting
10. License

Overview

Deep Focus is an asynchronous network scanner designed for large-scale service discovery. It performs intelligent probing of common network services and provides detailed authentication status information for each discovered service. You can consider it your personal mini Shodan.

The tool is optimized for passive cooling systems (such as Apple M-series laptops) with built-in thermal management that automatically throttles scanning when system load is high.

Key Capabilities

• Scans IP ranges for open services (HTTP, FTP, SSH, VNC, RTSP, RDP)
• Identifies authentication requirements for discovered services
• Fingerprints service types and vendors
• Exports actionable intelligence in structured format
• Manages system resources to prevent overheating

Features

Service Probes

Authentication Detection

The tool specifically identifies services that may be accessible without credentials:

• VNC: Detects "None" authentication type (passwordless access)
• FTP: Tests anonymous login capability
• RTSP: Identifies cameras without authentication requirements
• MQTT: Sends CONNECT handshake to detect open brokers (No-Auth)

Thermal Management

Built-in governor monitors system load and automatically pauses scanning when thresholds are exceeded, preventing thermal throttling on passively-cooled systems.

Requirements

• Python 3.8 or higher
• macOS, Linux, or Windows
• Network access to target ranges

Installation

Quick Start (Recommended)

Deep Focus comes with automated installers for all major platforms.

1. Download and Enter Directory:

   root@kitploit:~

   git clone https://github.com/Y0oshi/Project-Deep-Focus.git
   cd Project-Deep-Focus
   

2. Run Installer:

   • macOS / Linux: ./install.sh
   • Windows: .\install.bat

3. Launch: Restart your terminal, then type:

   root@kitploit:~

   deepfocus
   

That's it! You can now run the tool from anywhere.

Manual Installation (Optional)

If you prefer to configure everything yourself:

1. ensure python 3.8+ is installed.
2. create a virtual environment: python3 -m venv venv
3. activate it: source venv/bin/activate
4. install packages: pip install rich aiosqlite
5. run: python3 deep_focus.py

Usage

Starting the Tool

deepfocus

Available Commands

Basic Workflow

1. Launch the tool with python deep_focus.py
2. Configure target network with /settings (Option 1)
3. Adjust scan speed if needed with /settings (Option 3)
4. Start scanning with /scan
5. Monitor progress in the live dashboard
6. Press Ctrl+C to detach from dashboard (scanning continues)
7. Use /stop to halt scanning and export results

Configuration

Access configuration menu with /settings:

Option 1: Target Network

Specify the IP range to scan in CIDR notation.

Example: 192.168.1.0/24 (256 IPs)
Example: 10.0.0.0/16 (65,536 IPs)

Option 2: Power Level (10-100%)

Controls thermal limits. Higher values allow more aggressive scanning but increase heat generation.

Option 3: Scan Speed (100-1000 threads)

Controls concurrent connection attempts.

Warning: Speeds above 600 threads may cause router instability or system overheating.

Option 4: Export Path

Directory where scan results will be saved.

Understanding Export Logs

Export files are saved as text files with the naming convention:

deep_focus_export_[timestamp].txt

Log Entry Format

Each discovered service is recorded with the following structure:

IP: 192.168.1.100
Port: 21
Service: ftp
banner: 220 FTP Server Ready | Auth: [Anonymous Access ALLOWED]
--------------------

Field Descriptions

Authentication Status Indicators

FTP (Port 21)

VNC (Port 5900)

RTSP (Port 554)

Camera brands are identified when possible: Hikvision, Dahua, Axis, Foscam, Amcrest, Reolink, Ubiquiti.

SSH (Port 22)

RDP (Port 3389)

Target Selection Guide

The included targets.json file contains a curated list of high-value IP ranges organized by provider and region. You can open this file to find tested IP ranges for various discovery goals.

Each entry in targets.json includes:

• Provider name
• Description of typical findings
• IP ranges in CIDR notation

Range Categories

Recommended Targets by Goal

Troubleshooting

Scanner stops responding

The thermal governor may have paused scanning. Check system load and wait, or reduce power level in settings.

Low discovery rate

• Verify target range has active hosts
• Check network connectivity
• Some ranges may be heavily firewalled

Router becomes unstable

Reduce scan speed to 300-400 threads. High thread counts can overwhelm consumer routers.

Permission errors on export

Verify the export path exists and is writable.

License

This tool is provided for authorized security testing and network administration only. Users are responsible for ensuring compliance with applicable laws and regulations.

Author

Made by Y0oshi | Instagram: @rde0