fscan

fscan is a fast, portable internal network scanner designed for penetration testers who need rapid service enumeration and vulnerability detection during engagements. Written in Go as a single static binary with zero dependencies, it runs on any platform without installation — ideal for post-exploitation lateral movement scenarios. fscan combines host discovery, port scanning, service fingerprinting, and brute-force attacks into one tool, covering SMB, SSH, MySQL, MSSQL, Redis, PostgreSQL, FTP, MongoDB, and more. It includes built-in vulnerability detection for common CVEs like MS17-010 (EternalBlue), Redis unauthorized access, and default credential checks. The web scanning module detects common web vulnerabilities and fingerprints frameworks. With over 13,000 GitHub stars, fscan is widely used in red team operations for its speed and portability.