SubScan 🔍

A Python-based network scanning and host enumeration tool for reconnaissance on local networks.

---

Features

• Auto Interface Detection — Runs ip addr/ifconfig (Linux/Mac) or ipconfig (Windows) to list active interfaces; pick one or enter manually
• Host Discovery — ICMP ping sweep via Scapy (TCP fallback if unavailable)
• Port Scanning — Multi-threaded TCP connect scan with 3 selectable modes
• Service Identification — Maps open ports to known service names
• Banner Grabbing — Pulls service banners from open ports
• Auto Logging — All terminal output saved to timestamped .txt file

---

Requirements

pip install scapy

Root/Administrator privileges required for ICMP ping sweep.

---

Usage

sudo python3 SubScan.py

1. Active interfaces are auto-detected — select one or press M for manual entry
2. Select port scan mode:
   • [1] Common ports (~150 well-known ports)
   • [2] Full range (1–65535)
   • [3] Custom range
3. Results display in terminal and save to scan_YYYYMMDD_HHMMSS.txt

---

Example Output

[*] Network: 192.168.1.0/24
[*] Hosts in range: 254

[ PHASE 1 — Host Discovery ]
  [+] 192.168.1.1  — ALIVE
  [+] 192.168.1.10 — ALIVE

[ PHASE 2 — Port Scanning ]
  [OPEN] 22     SSH
  [OPEN] 80     HTTP    » Apache/2.4.41 (Ubuntu)
  [OPEN] 443    HTTPS

---

Disclaimer

This tool is intended for use on networks you own or have explicit permission to test.
Unauthorized scanning is illegal. Use responsibly.

---

Tech Stack

• scapy — ICMP packet crafting
• socket — TCP port scanning & banner grabbing
• ipaddress — Subnet/network calculation
• concurrent.futures — Multi-threaded scanning