top_ports_scanning
Quickly identify the most commonly used ports on target hosts to assess potential entry points.
dns_brute_force
Discover subdomains associated with a target domain, aiding in comprehensive domain mapping.
list_scan
Obtain a list of active hosts within a specified range without port scanning, useful for network inventory.
os_detection
Determine the operating system of a target host by analyzing network responses, assisting in vulnerability assessment.
version_detection
Identify service versions running on open ports to detect outdated or vulnerable services.
fin_scan
Perform stealthy scans by sending FIN packets to detect open ports without establishing a full connection.
idle_scan
Conduct highly stealthy scans by leveraging idle hosts to probe target systems, minimizing detection risks.
ping_scan
Detect active hosts in a network by sending ICMP echo requests, useful for network mapping.
syn_scan
Perform half-open TCP scans to identify open ports without completing the TCP handshake, reducing detection likelihood.
tcp_connect_scan
Establish full TCP connections to probe open ports, useful when SYN scans are not feasible.
udp_scan
Identify open UDP ports on a target host to detect services that do not use TCP.
port_scan_only
Focus solely on scanning ports without additional host discovery, streamlining the scanning process.
no_port_scan
Perform host discovery without scanning ports, useful for identifying live hosts without probing services.
arp_discovery
Identify active devices within a local network segment using ARP requests, effective in LAN environments.
disable_dns_resolution
Perform scans without resolving IP addresses to hostnames, enhancing scan speed and reducing DNS query traffic.