Skip to content
Get packs

fscan

CLI scanner for internal networks: hosts, ports, services and known weaknesses.

GitHub Download v2.2.2
Stars
14.7k
Forks
2k
Licence
MIT
Language
Go
Last update
1 months ago
Type
CLI

What it is

Fscan is a command-line tool for scanning internal networks. It checks which hosts are alive, which ports are open, what services run on them, and whether they have weak passwords or known vulnerabilities. Its README says it is meant to run these checks automatically in one pass. It is intended only for authorized security testing.

  • Check which hosts in a subnet respond to ping with -h 192.168.1.1/24 -ao
  • Scan specific ports such as 22,80,443,3389 with -p
  • Run a web scan on a single URL with -u http://192.168.1.1
  • Test SSH logins with a chosen username and password list using -m ssh
  • Export results to TXT, JSON or CSV for later review

Great for

  • Security staff running authorized internal network assessments
  • Penetration testers who want one tool for host discovery, port scans and service checks
  • Teams that want scan results exported as TXT, JSON or CSV
  • Developers who want to embed its scanning engine via the Go SDK (pkg/fscan)

Not ideal for

  • Anyone scanning networks or hosts they are not authorized to test, since the README disclaims responsibility for unauthorized use and the tool includes brute-force and exploitation features
  • Users who want a graphical point-and-click app, because the main interface is the command line (the web UI needs a separate build with -tags web)
  • Users needing a very small or embedded build today, since the lightweight C version (fscan-lite) is listed in the roadmap and not described as finished
Step-by-step guide: how to use fscanInstall, first run, examples, tips and FAQs
fscan vs Gitleaks

How to get it

  1. 1

    Clone and build from source

    You'll need: Go toolchain (the README gives build commands but does not state a Go version)

    Clone the repository

    git clone https://github.com/shadow1ng/fscan

    Standard build (from the repo folder)

    go build -ldflags="-s -w" -trimpath -o fscan .
  2. 2

    Run it

    • Build the binary with the standard build command
    • Run a host-alive check on a test network you are authorized to scan: ./fscan -h 192.168.1.1/24 -ao
    • Run a port scan on a known host: ./fscan -h 192.168.1.1 -p 22,80,443,3389
    • Use -nobr to turn off brute-force checks if you only want discovery and ports
  3. 3

    Get the most out of it

    • Use fscan -list-plugins to see which modules your build includes, with their default ports and usage
    • Pass -pwda or -usera to append your own passwords or usernames to the default lists
    • Set proxy options (-proxy or -socks5) or a network interface (-iface) when scanning through a VPN or proxy
    • Build with -tags web to get the optional web management interface for scan tasks
    • Use -lang en to switch the interface to English

Downloads

Source code (.zip)main branch · straight from GitHubRelease v2.2.28 files incl. fscan_2.2.2_freebsd_armv6

Strengths

  • Covers several scanning steps (host discovery, ports, services, web fingerprints, weak logins, vulnerability checks) in one tool
  • Has a large community and an active repository, with 14,726 stars and a push on 2026-10-01 shown in the metadata
  • Open-source under the MIT license with multiple output formats and a Go SDK

Trade-offs

  • Many features are offensive (brute force, exploitation, persistence, shell and log-clearing modules), so it must be used only with written authorization and it carries misuse risk
  • The README is truncated and mixes Chinese and English, so some options and behaviors are hard to verify from the text shown
  • Some local modules are described as Windows-specific, such as memory dumps and keylogging, which limits use on other systems

How it compares

ProjectStarsTypeLevelUpdatedBest for
fscan (this)14.7kCLIintermediate1 months agoSecurity staff running authorized internal network assessments
gitleaks30.6kCLIbeginner9 days agoDevelopers who want to catch accidentally committed credentials before they reach a shared repository
web-check35.3kAppintermediate4 days agoDevelopers checking how a site is configured
awesome-hacker-search-engines11.5kCurated listbeginner4 days agoSecurity professionals starting a penetration test or vulnerability assessment who need a place to look up data
nuclei32.5kCLIintermediate4 days agoSecurity engineers who want to run community-maintained vulnerability checks against their own systems
shadowsocks-rust11kCLIintermediate4 days agoDevelopers who want a native Rust build of shadowsocks

Stats synced from GitHub. The assessment above was drafted with AI from the project's README on 2026-10-29 and may miss recent changes — check the README before relying on a command. MIT licence: free to use, modify and distribute, including commercially, as long as you keep the copyright notice.