What problem does it solve?
Traditional port scanning tools like Nmap are prohibitively slow for large IP ranges (/8-/24) and full single-host port scans can take 5-10 minutes, creating bottlenecks in reconnaissance and penetration testing workflows.
Core Features & Use Cases
- High-speed single host scanning: RustScan delivers 400x faster 1000-port scans than Nmap (3-10 seconds vs 5-10 minutes) for quick initial port discovery.
- Large range scanning: Masscan handles /8 and /16 IP ranges that Nmap cannot process in reasonable timeframes, enabling ISP and government network-scale reconnaissance.
- Service identification: Integrated banner grabbing and Nmap pass-through deliver accurate service version detection for discovered open ports.
- Use Case: For a client pentest engagement, scan a /24 client subnet in 2-5 minutes to map all active services, or quickly enumerate all 65535 ports on a single high-value target in under 10 seconds before deeper service testing.
Quick Start
Use the port-mass-scan skill to run a high-speed full port scan on a target IP and get a list of all open ports with associated service versions.