Skip to main content

ScanSSH – Fast SSH Server And Open Proxy Scanner

ScanSSH is a free and open source utility that scans the given list of addresses or networks for open proxies, SSH protocol servers, Web and SMTP servers. It not just scans, but also displays the version of the running services. You can use it to collect statistics on the deployment of SSH protocol servers in your company or the Internet as whole. You can also use it to ensure all your machines are running the latest SSH protocol versions. The common use case of this utility could be information gathering for the pentesters and security professionals. In this guide, we will see how to install ScanSSH on various Unix-like operating systems and how to use it for gathering details of running services.

Install ScanSSH

On Arch Linux and derivatives, you can install it from AUR using any AUR helper programs such as Yay.

$ yay -S scanssh

On Fedora:

$ sudo dnf install scanssh

On Debian, Ubuntu, Linux Mint:

$ sudo apt install scanssh

On other distributions, you can download the source from the GitHub page given at the end of this guide and manually compile and install it yourself.

ScanSSH Usage

The typical syntax of ScanSSH is:

scanssh [-VIERph] [-s scanners,...] [-n ports,...] [-u socks hosts,...] [-e excludefile] addresses...

Let us see some examples. The following command will scan for ssh servers in a network:

$ sudo scanssh -s ssh 192.168.43.0/24

ScanSSH

If you want to scan for SSH servers on port 22 only, you could use:

$ sudo scanssh -n 22 -s ssh 192.168.43.0/24

Also, you can specify only one host IP address to scan like below:

$ sudo scanssh -s ssh 192.168.43.192

And, this command will scan the given network for open proxies.

$ sudo scanssh -p 192.168.43.0/24

Here, -p flag is used for scanning open proxies.

Not just SSH and open proxies, ScanSSH will scan for the following modules.

  • socks5 – detects SOCKS v5 proxy
  • socks4 – detects SOCKS v4 proxy
  • http-proxy – detects HTTP get proxy
  • http-connect – detects HTTP connect proxy
  • telnet-proxy – detects telnet proxy

For more details, check man pages.

$ man scanssh

Comments

Post a Comment

Popular posts from this blog

4 Ways to Communicate Across Browser Tabs in Realtime

1. Local Storage Events You might have already used LocalStorage, which is accessible across Tabs within the same application origin. But do you know that it also supports events? You can use this feature to communicate across Browser Tabs, where other Tabs will receive the event once the storage is updated. For example, let’s say in one Tab, we execute the following JavaScript code. window.localStorage.setItem("loggedIn", "true"); The other Tabs which listen to the event will receive it, as shown below. window.addEventListener('storage', (event) => { if (event.storageArea != localStorage) return; if (event.key === 'loggedIn') { // Do something with event.newValue } }); 2. Broadcast Channel API The Broadcast Channel API allows communication between Tabs, Windows, Frames, Iframes, and  Web Workers . One Tab can create and post to a channel as follows. const channel = new BroadcastChannel('app-data'); channel.postMessage(data); And oth...
Post a Comment
Read more

Working with Node.js streams

  Introduction Streams are one of the major features that most Node.js applications rely on, especially when handling HTTP requests, reading/writing files, and making socket communications. Streams are very predictable since we can always expect data, error, and end events when using streams. This article will teach Node developers how to use streams to efficiently handle large amounts of data. This is a typical real-world challenge faced by Node developers when they have to deal with a large data source, and it may not be feasible to process this data all at once. This article will cover the following topics: Types of streams When to adopt Node.js streams Batching Composing streams in Node.js Transforming data with transform streams Piping streams Error handling Node.js streams Types of streams The following are four main types of streams in Node.js: Readable streams: The readable stream is responsible for reading data from a source file Writable streams: The writable stream is re...
Post a Comment
Read more

Certbot SSL configuration in ubuntu

  Introduction Let’s Encrypt is a Certificate Authority (CA) that provides an easy way to obtain and install free  TLS/SSL certificates , thereby enabling encrypted HTTPS on web servers. It simplifies the process by providing a software client, Certbot, that attempts to automate most (if not all) of the required steps. Currently, the entire process of obtaining and installing a certificate is fully automated on both Apache and Nginx. In this tutorial, you will use Certbot to obtain a free SSL certificate for Apache on Ubuntu 18.04 and set up your certificate to renew automatically. This tutorial will use a separate Apache virtual host file instead of the default configuration file.  We recommend  creating new Apache virtual host files for each domain because it helps to avoid common mistakes and maintains the default files as a fallback configuration. Prerequisites To follow this tutorial, you will need: One Ubuntu 18.04 server set up by following this  initial ...
Post a Comment
Read more