Lib.rs

› Network programming
#nmap #cybersecurity #port-scan #port-scanning #host-discovery #penetration-test

pistol

An implementation of a subset of the nmap scanning tool

by rikonaka

8 releases

0.1.7 Aug 15, 2023
0.1.6 Aug 5, 2023
0.1.0 Jun 10, 2023

#539 in Network programming

Download history 115/week @ 2024-02-18 32/week @ 2024-02-25 3/week @ 2024-03-10 7/week @ 2024-03-17 68/week @ 2024-03-31

78 downloads per month

MIT license

265KB
7K SLoC

pistol-rs

Host discovery (Ping Scanning)

I implement pistol host discovery according to the nmap documentation.

Methods Detailed Documentation Notes
[x] TCP SYN Ping nmap references
[x] TCP ACK Ping nmap references
[x] UDP Ping nmap references
[x] ICMP Ping nmap references
[x] ARP Scan nmap references
[ ] IP Protocol Ping nmap references Complicated and not very useful

Port Scanning Techniques and Algorithms

I implement pistol transport layer scan according to the nmap pdf and documentation.

Methods Detailed Documentation Notes
[x] TCP SYN Scan nmap references
[x] TCP Connect() Scan nmap references
[x] TCP FIN Scan nmap references
[x] TCP Null Scan nmap references
[x] TCP Xmas Scan nmap references
[x] TCP ACK Scan nmap references
[x] TCP Window Scan nmap references
[x] TCP Maimon Scan nmap references
[x] TCP Idle Scan nmap references
[x] IP Protocol Scan nmap references
[x] UDP Scan nmap references
[ ] TCP FTP Bounce Scan nmap references The bugs exploited have long been fixed

Flood attack

Methods
[x] TCP SYN Flood
[x] TCP ACK Flood
[x] UDP Flood
[x] ICMP Flood

CLI program

I also implement a demo code here.

Dependencies

~3.5–5.5MB
~99K SLoC