SynScan

A fast half-open portscanner. This tool will send TCP packets with the SYN flag set at the destination address. SynScan will send traffic as fast as the host network interface can support.

Based on SynScan version 1.6 by psychoid/tCl (http://www.psychoid.lam3rz.de) with the following changes:

• Fixes for several format string overflows and other bugs
• Split into multiple programs for sending and receiving of SYN packets
• Added a seperate "sslog" tool which only logs open ports and doesn't perform further checks
• Support for identifying samba servers in synscand
• Support for querying the Server: header on HTTP servers
• Support for Open X11 server scanning
• Ported to Solaris and IRIX operating systems
• Adjusted scan timing to provide for much faster network scanning
• Added support for IPv6 (currently in beta)

Screen Shots

Versions

SynScan 3.1

This is the current stable version, and should compile on modern versions of Linux, Solaris and IRIX. This is the currently recommended version.

SynScan 3.9

SynScan 3.9 is an early development version of the forthcoming SynScan 4.0. It is currently able to scan IPv6 networks and detect open ports, however there are many limitations in the current beta version. As far as i know, SynScan 3.9 is the first IPv6 half-open scanning tool.

• No support for IPv4 (future versions will let you switch between v4/v6)
• No support for synscand (only sslog is functional sofar)
• Tested on Linux and MacOS

SynScan 3.9b3

• The sslog tool now supports IPv4 and IPv6 in the same binary
• Minor bugfixes and updates, mostly in the sslog tool

SynScan 3.9b4

• Now includes seperate synscan and synscan6 binaries for IPv4/IPv6 respectively

This version should be fully functional, supporting everything supported by the previous 3.1 version, while also allowing IPv6 port scanning. It has only been tested on Linux.

SynScan 3.9b5

• Now includes a port to MacOSX, supporting both IPv4 and IPv6 and has been tested on OSX 10.4.x (Tiger) on PPC
• Fixed a divide by zero error when scanning a small number of hosts/ports such that the scan took less than 1 second.

SynScan 3.9b6

• Fixed two minor bugs, ipv6 output wasn't being written to the output file, and ipv4 output wasn't being flushed to the output file (and so would only be written periodically)

SynScan 3.9b7

• Now correctly working on MacOSX/Intel

Developer

John Anderson

Download

• synscan-3.1.tar.bz2 (md5sum: b704c17689a8c75a49722d54eb43f260)
• synscan-3.9b2.tar.bz2 (md5sum: 9dc786ac6f5c30f07bf7d9a6afeee9cc)
• synscan-3.9b3.tar.bz2 (md5sum: f52d59b11cb68ac7ab48380159ec312b)
• synscan-3.9b4.tar.bz2 (md5sum: fa8acad8019137cab50272c4b3c01ead)
• synscan-3.9b5.tar.bz2 (md5sum: 94a3d33ddf6f9fcfe6312edb10959877)
• synscan-3.9b6.tar.bz2 (md5sum: 8bccee5248b7ba465149c82aa9d2189e)
• synscan-3.9-b7.tar.gz (md5sum: 9bdde26233145fd9bdbc6dd6cdc5391b)
• synscan-3.9b8.tar.gz (md5sum: 319357bb2f4cbd50271a09d2339e5d3f)