Fscan is a network reconnaissance and vulnerability scanning tool that automates comprehensive security assessments of internal networks through a single command.
The tool addresses the need for rapid, multi-stage network reconnaissance by combining host discovery, port scanning, service identification, and vulnerability detection into a unified workflow. It performs ICMP-based host discovery across large network segments, conducts TCP port scanning with built-in common port definitions, identifies services through protocol fingerprinting, and detects web technologies including CMS platforms and WAF/CDN solutions. Beyond passive reconnaissance, it includes brute-force capabilities against 28 service types, hash-based authentication testing, and exploitation modules for specific vulnerabilities like MS17-010 and Redis misconfigurations. The tool also provides post-exploitation functionality including credential harvesting, persistence mechanisms, and log cleanup utilities.
Fscan suits security teams and penetration testers conducting internal network assessments who need a single tool covering reconnaissance through exploitation. It is particularly valuable for environments where rapid, automated scanning across multiple service types is required. The tool distinguishes itself through its breadth of integrated capabilities—combining scanning, brute-forcing, and exploitation in one binary—and its support for embedding as a Go SDK within larger security platforms or agents. It offers flexible output formats, proxy support, granular timeout and concurrency controls, and a pluggable architecture for extending functionality.
Development activity shows sustained, substantial effort with a large volume of recent commits addressing new features, bug fixes, and performance improvements. The project maintains active support for multiple languages and includes infrastructure for testing through built-in Docker environments. The codebase demonstrates architectural maturity through modular plugin separation and task-level control mechanisms like pause and resume functionality. Performance monitoring and reporting capabilities are integrated into the tool itself, indicating attention to operational visibility during scanning operations.
