This is a defensive network-assessment tool, built to help operators find and remove obsolete or insecure protocols (legacy TLS, cleartext Telnet/FTP, SMBv1/MS17-010) on infrastructure they are responsible for.

Run it only against systems you own or have explicit, written authorisation to test. Unauthorised scanning may be illegal in your jurisdiction and can disrupt production services. You are responsible for how you use it.

• It does not exploit anything. MS17-010 confirmation is a read-only check delegated to Nmap's smb-vuln-ms17-010 script; no exploit payload is ever sent, so it cannot crash a target.
• It never asserts a "patched" verdict from ambiguous output — uncertainty is always reported as inconclusive.
• It is an exposure scanner, not a patch-compliance tool; definitive patch state requires credentialed verification.

If you find a security issue in the scanner itself, please open a private report via GitHub Security Advisories (Security tab → "Report a vulnerability), or email the maintainer, rather than filing a public issue. I'll respond as soon as I can.