SYN_Scanner_V_6.0 - Netmap: Stealth & Vulnerability Scanner

SYN_Scanner_V_6.0 is a Python-based multi-threaded network security tool designed for stealth scanning and vulnerability analysis. It utilizes raw sockets (via Scapy) to perform "half-open" SYN scans, evading basic firewall logging, and integrates with the NIST National Vulnerability Database (NVD) API to map discovered service banners to known CVEs.

Disclaimer: This tool is developed for educational and ethical security testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. The developer assumes no liability and is not responsible for any misuse or damage caused by this program.

Features

• Stealth SYN Scanning: Performs TCP Half-Open scanning to detect open ports without completing the 3-way handshake.
• Multi-Mode Scanning:
  • Vertical: Scan a single target for a specific port range.
  • Horizontal (LAN): Scan an entire subnet for a specific port.
  • Random: Randomized port scanning to evade intrusion detection systems (IDS).
• Vulnerability Analysis:
  • Automated Banner Grabbing.
  • Real-time CVE lookup using the NVD API (NIST).
  • CVSS Scoring and Severity ratings.
• Reporting: Automatically generates detailed text-based reports with timestamps and findings.
• High Performance: Multi-threaded architecture (default 50 threads).

Prerequisites

• OS: Linux/Unix (Requires Root privileges for raw socket manipulation)
• Python: 3.x

Installation

1. Clone the repository

   git clone [https://github.com/sreekanthankn//SYN_Scanner_V_6.0.git](https://github.com/sreekanthankn//SYN_Scanner_V_6.0.git)
   cd SYN_Scanner_V_6.0

2. Install dependencies

   pip install -r requirements.txt

Usage

Because Netmap uses Scapy to craft raw packets, it must be run with sudo (root privileges).

sudo python3 SYN_Scanner_V_6.0.py

Scan Modes

Vertical Scan: Best for deep analysis of a single host.

Horizontal Scan: Best for discovering active hosts on a local network (LAN).

Random Scan: Useful for testing firewall rules or IDS sensitivity.

Comprehensive: User-defined range for targeted audits.

Output

Reports are saved in the local directory with the format: Netmap_Report_.txt

License

This project is licensed under the MIT License - see the LICENSE file for details.

Acknowledgements

See ACKNOWLEDGEMENTS.md for credits and thanks.

Contact

For support, feedback, or collaboration:

• Sreekanthan K N
• Email: sreekanthankn@gmail.com
• LinkedIn: https://www.linkedin.com/in/sreekanthan-k-n-79763623
• GitHub: https://github.com/sreekanthankn

Feel free to open an issue for bugs, improvements, or feature requests.

Disclaimer

This tool is for educational and authorized testing purposes only. Scanning targets without prior mutual consent is illegal. The developer is not responsible for any misuse or damage caused by this program. Always obtain permission before scanning networks you do not own.