RustScan

Fast port scanner written in Rust with Nmap integration for service detection

Recon & OSINT8 commands

#port#scanner#rust#fast#nmap#network

Installation

1Install via cargo

2Install via Docker

3Verify installation

# Using Cargo
cargo install rustscan

# Using Docker
docker pull rustscan/rustscan

# Verify
rustscan --version

# Docker usage
docker run -it --rm --name rustscan rustscan/rustscan -a 192.168.0.1

Basic Usage

Fast port scanning with automatic Nmap script execution on open ports

# Scan single host
rustscan -a 192.168.0.1

# Scan with Nmap service detection
rustscan -a 192.168.0.1 -- -A

# Scan multiple hosts
rustscan -a 192.168.0.0/24

# Custom port range
rustscan -a 192.168.0.1 -p 1-1000

# Increased timeout for slower hosts
rustscan -a 192.168.0.1 -t 2000

# Scan with custom Nmap arguments
rustscan -a 192.168.0.1 -- -sV -sC

# Batch mode
rustscan -a hosts.txt -- -A

Command Reference

8 commands

1Target IP, CIDR, or file of hosts

-a

2Port range to scan

-p

3Timeout in milliseconds (default 1500)

-t

4Batch size for parallel scanning

-b

5Scan mode (default: Connect scan)

-g

6Nmap arguments passed after --

--

7Number of scan attempts

--tries

8Skip config file loading

--no-config

When to Use

Fast initial port discovery in penetration tests

Time-sensitive scanning engagements

Scanning large IP ranges quickly

Automated Nmap service detection on discovered ports

CTF challenges and lab environments

Notes & Tips

Written in Rust for maximum performance

Automatically pipes open ports to Nmap for detailed scanning

Docker image is available for cross-platform use

Batch mode reduces scanning time for large target lists

Common Errors & Solutions

Nmap not found

Ensure Nmap is installed and in PATH when using -- arguments

Permission denied

Run with sudo or use a non-privileged scan method

# Scan single host rustscan -a 192.168.0.1 # Scan with Nmap service detection rustscan -a 192.168.0.1 -- -A # Scan multiple hosts rustscan -a 192.168.0.0/24 # Custom port range rustscan -a 192.168.0.1 -p 1-1000 # Increased timeout for slower hosts rustscan -a 192.168.0.1 -t 2000 # Scan with custom Nmap arguments rustscan -a 192.168.0.1 -- -sV -sC # Batch mode rustscan -a hosts.txt -- -A