Lightning-fast port scanner written in Rust that automatically pipes results into Nmap for service detection and scripting.
rustscan -a {target} -p {ports} --batch {batch} --timeout {timeout} 🌍 target → ip 🌍 ports → 1-65535 🌍 batch → 4500 🌍 timeout → 1500 rustscan -a {target} -p {ports} --batch {batch} --timeout {timeout}Sandbox: execFile · Timeout: 300s
network.scan.port network.discovery.host security.fingerprint.service | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
flag-a | string | Yes | - | Target IP address, hostname, or CIDR range | -a, --address |
flag-p | string | No | 1-65535 | Ports to scan (e.g. 80,443 or 1-65535) | -p, --ports |
flag-b | integer | No | 4500 | Batch size for port scanning | -b, --batch |
timeout | integer | No | 1500 | Timeout in milliseconds (default 1500) | --timeout |
tries | integer | No | 1 | Number of tries before giving up on a port | --tries |
flag-n | boolean | No | - | Do not run Nmap automatically | -n, --no-nmap |
range | string | No | - | CIDR range to scan | --range |
accessible | boolean | No | - | Only show accessible ports | --accessible |
greppable | boolean | No | - | Greppable output format | -g, --greppable |
flag-u | boolean | No | - | Scan UDP ports (experimental) | -u, --udp |
V | boolean | No | - | Print version information | -V, --version |
flag-g | boolean | No | - | Greppable output | -g, --greppable |
h | boolean | No | - | Print help information | -h, --help |
t | boolean | No | - | The time in milliseconds before a timeout occurs (default: 1500) | -t, --timeout |
| Type | Description | MIME | Schema | Trust |
|---|---|---|---|---|
network.scan.port.list | List of open ports from fast scan | text/plain | - | verified |
network.scan.nmap.xml | Nmap XML output when piped to Nmap | application/xml | - | verified |
Inputs
network.target.ip Target IP address or hostname
network.target.range IP range or CIDR notation
Outputs
network.scan.port.list Discovered open ports
network_traffic Produces
network.scan.port.listConsumes
network.target.ipnetwork.target.range| Resource | Value |
|---|---|
| CPU | low |
| Memory | 32 MB |
| Network | medium |
| Disk I/O | low |
Scan all ports on a single target with default Nmap integration
rustscan -a 10.10.10.1Scan specific ports with custom batch size
rustscan -a 10.10.10.1 -p 22,80,443 -b 2000Scan without auto-Nmap
rustscan -a scanme.nmap.org -nScan a CIDR range
rustscan -a 10.10.10.0/24 --range 1-1000Greppable output for scripting
rustscan -a 10.10.10.1 -gUDP scan (experimental)
rustscan -a 10.10.10.1 -u -p 53,161RustScan is a modern port scanner written in Rust that optimizes the scanning workflow by automatically piping all discovered open ports into Nmap for detailed service enumeration and NSE script execution.
# Basic scan with Nmap auto-integration
rustscan -a 10.10.10.1
# Fast port-only scan, skip Nmap
rustscan -a 10.10.10.1 -n
# Scan specific ports
rustscan -a 10.10.10.1 -p 22,80,443,8080
-b controls batch size (default: 4500); lower for unstable connections--timeout in milliseconds; increase for high-latency targets--tries increases reliability on lossy networks