Menu
Auth/lab ref: ultra-fast async TCP SYN port scanner capable of scanning the entire IPv4 internet in minutes.
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/AeonDave/malskill --skill masscanThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Showing SKILL.md
Based on SOC occupation classification
| name | masscan |
| description | Auth/lab ref: ultra-fast async TCP SYN port scanner capable of scanning the entire IPv4 internet in minutes. |
| license | MIT |
| compatibility | Linux / macOS / Windows (WSL); Build from source or package manager. |
| metadata | {"author":"AeonDave","version":"1.1"} |
Ultra-fast TCP SYN scanner for large-scale port discovery.
masscan 10.0.0.0/16 -p445 --rate=10000 -oG out.gnmap
masscan 10.0.0.0/8 -p0-1023 --rate=50000 -oX out.xml
masscan -iL targets.txt -p80,443,8080,445 --rate=10000
| Flag | Purpose |
|---|---|
-p <ports> | Port list / range (e.g. 0-65535, 80,443) |
--rate <n> | Packets per second (start low) |
-oG / -oX / -oJ | Output: grepable / XML / JSON |
-iL <file> | Read targets from file |
--banners | Grab service banners |
--excludefile | Exclude IPs from scan |
--adapter-ip | Source IP |
--router-mac | Default gateway MAC |
# Discover open ports fast
masscan 10.0.0.0/24 -p1-65535 --rate=5000 -oG masscan.out
# Extract unique ports
grep "open" masscan.out | awk '{print $4}' | cut -d/ -f1 | sort -u | paste -sd, > ports.txt
# Extract unique hosts
grep "open" masscan.out | awk '{print $6}' | sort -u > hosts.txt
# Deep scan on discovered ports/hosts
nmap -sV -sC -O -p$(cat ports.txt) -iL hosts.txt -oA nmap_deep
masscan 10.0.0.0/24 -p22,80,443,445,8080 --banners --rate=1000 -oJ results.json
# masscan.conf
rate = 10000
ports = 0-65535
output-format = json
output-filename = results.json
excludefile = /etc/masscan/exclude.conf
masscan 10.0.0.0/8 -c masscan.conf
masscan 10.0.0.0/8 -p- --rate=50000 --resume paused.conf
| Environment | Safe Rate |
|---|---|
| Internal lab | 10,000–100,000 |
| Corporate network | 1,000–5,000 |
| Internet | 10,000–1,000,000 |
| Stealth | 100–500 |
--rate=1000 and increase; watch for packet loss--adapter-ip if multiple interfaces exist--router-mac if default gateway detection fails| File | When to load |
|---|---|
references/tuning.md | Config file options, adapter settings, exclude lists |