Browse Exploit & Auxiliary Modules
The Metasploit Project hosts the world's largest database of quality assured exploits, including hundreds of remote exploits, auxiliary modules, and payloads. You can even review the Metasploit Framework source code of any module - or write your own.
Search for modules
TCP Port Scanner
Enumerate open TCP services
Rank
- Normal
Authors
- hdm < hdm [at] metasploit.com >
- kris katterjohn < katterjohn [at] gmail.com >
Development
Similar Modules
- auxiliary/scanner/portscan/ack
- auxiliary/scanner/portscan/ftpbounce
- auxiliary/scanner/portscan/syn
- auxiliary/scanner/portscan/xmas
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use auxiliary/scanner/portscan/tcp
msf auxiliary(tcp) > set RHOSTS [TARGET HOST RANGE]
msf auxiliary(tcp) > run
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use auxiliary/scanner/portscan/tcp
msf auxiliary(tcp) > set RHOSTS [TARGET HOST RANGE]
msf auxiliary(tcp) > run
Module Options
| CONCURRENCY | The number of concurrent ports to check per host (default: 10) |
| FILTER | The filter string for capturing traffic |
| INTERFACE | The name of the interface |
| PCAPFILE | The name of the PCAP capture file to process |
| PORTS | Ports to scan (e.g. 22-25,80,110-900) (default: 1-10000) |
| RHOSTS | The target address range or CIDR identifier |
| SNAPLEN | The number of bytes to capture (default: 65535) |
| THREADS | The number of concurrent threads (default: 1) |
| TIMEOUT | The socket connect timeout in milliseconds (default: 1000) |
| CHOST | The local client address |
| CPORT | The local client port |
| ConnectTimeout | Maximum number of seconds to establish a TCP connection |
| GATEWAY | The gateway IP address. This will be used rather than a random remote address for the UDP probe, if set. |
| NETMASK | The local network mask. This is used to decide if an address is in the local network. |
| Proxies | Use a proxy chain |
| SSL | Negotiate SSL for outgoing connections |
| SSLVersion | Specify the version of SSL that should be used (accepted: SSL2, SSL3, TLS1) |
| ShowProgress | Display progress messages during a scan |
| ShowProgressPercent | The interval in percent that progress should be shown |
| UDP_SECRET | The 32-bit cookie for UDP probe requests. |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |
| TCP::max_send_size | Maxiumum tcp segment size. (0 = disable) |
| TCP::send_delay | Delays inserted before every send. (0 = disable) |
