port-mass-scan

What problem does it solve?

Traditional port scanning tools like Nmap are prohibitively slow for large IP ranges (/8-/24) and full single-host port scans can take 5-10 minutes, creating bottlenecks in reconnaissance and penetration testing workflows.

Core Features & Use Cases

• High-speed single host scanning: RustScan delivers 400x faster 1000-port scans than Nmap (3-10 seconds vs 5-10 minutes) for quick initial port discovery.
• Large range scanning: Masscan handles /8 and /16 IP ranges that Nmap cannot process in reasonable timeframes, enabling ISP and government network-scale reconnaissance.
• Service identification: Integrated banner grabbing and Nmap pass-through deliver accurate service version detection for discovered open ports.
• Use Case: For a client pentest engagement, scan a /24 client subnet in 2-5 minutes to map all active services, or quickly enumerate all 65535 ports on a single high-value target in under 10 seconds before deeper service testing.

Quick Start

Use the port-mass-scan skill to run a high-speed full port scan on a target IP and get a list of all open ports with associated service versions.