Turns a 17 minutes Nmap scan into 24 seconds.
Find all open ports fast with Rustscan, automatically pipe them into Nmap.

|

🔧 Cargo (Universal)

Arch

HomeBrew

Kali / Debian

Note: You must have Nmap installed.

🤔 What is this?

1. Find ports quickly using Rustscan (26 seconds).
2. Automatically runs nmap -A -p $ports -vvv on those ports.
3. Profit???

Name	⚡ Nmap with RustScan ⚡	🐢 Nmap 🐢
Gif
Time	39 seconds	17 minutes and 41 seconds
Setup	Set threads to 1000	Run nmap with -A for all scripts Run Nmap with -p- for all ports

_{Note The nmap command used was the same for both of them. Nmap -A.}

RustScan takes the Nmap scan down to 39 seconds from 17 minutes and 41 seconds.

RustScans only job is to reduce the friction between finding open ports and inputting them into nmap.

✨ Features

• Scans all 64k ports in 26 seconds (on 1k threads).
• Saves you time by automatically piping it into Nmap. No more manual copying and pasting!
• Does one thing and does it well. Only purpose is to improve Nmap, not replace it!

🔭 Why RustScan?

Why spend time running fast scans and manually copying the ports, or waiting for a 20 minute scan to finish when you can just do all 64k ports in less than a minute?

📊 RustScan vs Nmap vs MassScan

| Name | RustScan | Nmap | Masscan | | ------------------------------------------------------------------------------------------ | -------- | ---- | ------- | | Fast | ✅ | ❌ | ✅ | | Actually useful | ❌ | ✅ | ❌ | | Realises it's not useful, and pipes the only useful data into the only useful port scanner | ✅ | ❌ | ❌ |

🙋 FAQ

I think this would be a great port scanner on its own without Nmap!

No. If you want a fast port scanner, use Masscan.

I have this great idea for a script to get information on ports / hosts

Great. Contribute it to Nmap! :D

Not everyone has nmap installed....

If you're a pentester, then yes, you have Nmap installed.

I want to contribute!

Great! I'd love some help with this. Read the contributing.md file file for more information!

📖 Full Installation Guide

You need Nmap. If you have Kali Linux or Parrot OS installed, you already have Nmap. If not, follow the nmap install guide.

The easiest way to install RustScan is to use one of the packages provided for your system, such as HomeBrew or Yay for Arch Linux.

The most universal way is to use cargo, Rust's built in package manager (think Pip but for Rust). Follow this guide to installing Rust & Cargo.

If you face any issues at all, please leave a GitHub issue. I have only tested this on Linux, so there may be issues for Mac OS or Windows.

🖥️ Debian / Kali

Download the .deb file from the releases page: https://github.com/brandonskerritt/RustScan/releases/tag/1.0.1 Run the commpand dpkg -i on the file. Note: sometimes you can double click the file to achieve the same result.

🍺 HomeBrew

Tap the brew:

brew tap brandonskerritt/rustscan

Install it:

brew install rustscan

🤸 Usage

rustscan -h

The format is rustcan -t 500 -T 1500 192.168.0.1 to scan 192.168.0.1 with 500 threads with a timeout of 1500ms. The timeout is how long RustScan waits for a response until it assumes the port is closed.

🎪 Contributing

Please read the contributing.md file

💻 Other Hacking Projects By This Author

🧮 Ciphey

Ciphey is an automated decryption tool using artifical intelligence & natural language processing. Check it out here!

Contributors ✨

Thanks goes to these wonderful people (emoji key):

Brandon 🚇 ⚠️ 💻 🎨

This project follows the all-contributors specification. Contributions of any kind welcome!