rustscan

Scan open network ports and hand off results to nmap for service detection.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill rustscan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: rustscan
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/network/rustscan
Command: npx skills add https://github.com/AeonDave/malskill --skill rustscan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill rapidly identifies open network ports on target systems, streamlining the initial stages of network reconnaissance and vulnerability assessment.

Core Features & Use Cases

  • High-Speed Port Scanning: Utilizes RustScan to discover open ports in seconds.
  • Automated Nmap Handoff: Seamlessly pipes discovered open ports to Nmap for in-depth service and version detection.
  • Use Case: Quickly scan a subnet for web servers or identify all open ports on a critical host before performing a detailed vulnerability analysis.

Quick Start

Use the rustscan skill to scan the IP address 10.10.10.5 and pass the -sV flag to nmap.

Frequently Asked Questions about rustscan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I quickly discover open network ports and detect running services?

To discover open network ports and detect services, this Skill uses RustScan for rapid port discovery and automatically pipes the results to nmap for in-depth service and version detection.

Do I need nmap installed to perform high-speed network port scanning?

Yes, you need nmap installed and accessible in your environment to perform full service and version detection, as the port scanning results are automatically handed off to nmap for analysis.

What is the best way to scan a subnet for web servers during a security assessment?

The best way to scan a subnet for web servers is using this Skill to rapidly identify open ports across the network range, automatically passing discovered ports to nmap for detailed service identification.

Can I pass custom flags like -sV to nmap when scanning an IP address?

Yes, you can pass custom flags like -sV to nmap when scanning an IP address, allowing you to tailor the in-depth service and version detection performed after the initial rapid port discovery.

How does automated nmap handoff work after finding open ports on a host?

Automated nmap handoff works by taking the open ports rapidly discovered by RustScan and seamlessly piping them directly into nmap to execute in-depth service and version detection on the target host.

What are the limitations of using rustscan for infrastructure audits?

The primary limitation for infrastructure audits is the dependency on nmap; if nmap is not installed and accessible in the environment, the Skill cannot perform full service and version detection on discovered ports.