fscan

Run `npx skills add shadow1ng/fscan --all -g -y` in your terminal to install this skill globally for your AI agent.

It discovers live hosts, open ports, and running services, then checks for weak passwords, unauthorized access, and vulnerabilities like MS17-010 across your internal network.

Yes. The -silent flag outputs clean NDJSON, so agents and scripts can parse hosts, services, and vulnerabilities line by line without human-readable log noise.

It tests weak credentials on 28 services including SSH, RDP, SMB, FTP, MySQL, MSSQL, Oracle, Redis, and MongoDB, with support for password dictionaries and NTLM hashes.

Only on networks you own or have explicit written authorization to test. Unauthorized scanning of third-party systems is illegal in most jurisdictions.