ProRT-IP WarScan

Protocol/Port Real-Time War Scanner for IP Networks

Modern network scanner combining Masscan/ZMap speed with Nmap detection depth.

What is ProRT-IP?

ProRT-IP WarScan (Protocol/Port Real-Time IP War Scanner) is a modern equivalent of classic 1980s/1990s war dialers—reimagined for IP networks. Where tools like ToneLoc and THC-Scan systematically dialed phone numbers to find modems/BBSs, WarScan systematically scans IP address ranges, ports, and protocols to discover active hosts and services.

WarScan consolidates and advances the best of today's network scanning and analysis tools, delivering a comprehensive, high-performance, stealth-focused toolkit for penetration testers and red teams.

Key Features

Speed: 10M+ packets/second stateless scanning (comparable to Masscan/ZMap)
Depth: Comprehensive service detection and OS fingerprinting (like Nmap)
Safety: Memory-safe Rust implementation prevents entire vulnerability classes
Stealth: Advanced evasion techniques (timing, decoys, fragmentation, TTL manipulation, idle scans)
Modern TUI: Real-time dashboard with 60 FPS rendering, 4-tab interface, 8 production widgets
Extensibility: Plugin system with Lua 5.4 sandboxed execution

At a Glance

Multi-Protocol Scanning: TCP (SYN, Connect, FIN, NULL, Xmas, ACK, Idle/Zombie), UDP, ICMP/ICMPv6, NDP
IPv6 Support: ✅ Complete IPv6 support (all 8 scanners) - Full dual-stack implementation
Service Detection: 187 embedded protocol probes + 5 protocol-specific parsers (HTTP, SSH, SMB, MySQL, PostgreSQL) + SSL/TLS handshake (85-90% detection rate)
OS Fingerprinting: 2,600+ signatures using 16-probe technique
Evasion Techniques: IP fragmentation (-f, --mtu), TTL manipulation (--ttl), bad checksums (--badsum), decoy scanning (-D RND:N), idle/zombie scan (-sI)
High Performance: Asynchronous I/O with lock-free coordination, zero-copy packet building, adaptive rate limiting (-1.8% overhead)
Cross-Platform: Linux, Windows, macOS, FreeBSD support with NUMA optimization
Multiple Interfaces: CLI (production-ready), TUI (60 FPS real-time dashboard), Web UI (planned), GUI (planned)

Quick Start

# Download latest release
wget https://github.com/doublegate/ProRT-IP/releases/latest/download/prtip-linux-x86_64
chmod +x prtip-linux-x86_64
sudo mv prtip-linux-x86_64 /usr/local/bin/prtip

# SYN scan (requires privileges)
prtip -sS -p 80,443 192.168.1.0/24

# Fast scan (top 100 ports)
prtip -F 192.168.1.1

# Service detection
prtip -sV -p 1-1000 scanme.nmap.org

# TUI mode with real-time dashboard
prtip --tui -sS -p 1-1000 192.168.1.0/24