KillerScan Steve the Killer

arp csharp device-fingerprinting dotnet msp network-discovery network-scanner network-tools networking portable snmp sysadmin windows wpf

Use this command to install KillerScan:

winget install --id=SteveTheKiller.KillerScan -e

KillerScan: A Comprehensive Network Scanner for Field Technicians

Primary Purpose:
KillerScan is a powerful network scanner designed to provide field technicians, MSPs, and sysadmins with accurate and efficient network visibility. It quickly identifies all devices on a local area network (LAN), determining their type, manufacturer, and services running.

Key Features:

Dual ARP Cache Reads: Utilizes both ARP cache and parallel ping sweeps to ensure comprehensive detection of all devices, including those blocking ICMP.
TCP Fingerprinting: Conducts a throttled scan across over 30 service ports, probing banners, HTTP, TLS, NetBIOS, and SNMP for enhanced identification.
mDNS & SSDP Discovery: Leverages multicast passes to detect Bonjour services and UPnP devices, revealing Chromecasts, printers, Sonos, and more.
Vendor Identification: Uses the IEEE OUI database (MA-L, MA-M, MA-S) for precise manufacturer lookup, including overrides for private blocks.
Device Classification: Employs a weighted scoring system considering hostname, vendor, ports, banners, mDNS, and SSDP to classify devices into categories like routers, NAS, printers, cameras, IoT, phones, etc.
Export Options: Exports results to CSV or styled HTML reports, with the ability to copy device details directly.
Customizable Themes: Offers six themes (Dark, Light, High Contrast, Blood, Greed, Cyanotic) with live accent colors and per-theme device-type coloring for enhanced readability.
Portable Execution: Runs as a single .exe file without dependencies, installable via winget or used portably, ensuring flexibility.
Embedded Databases: Includes the full IEEE OUI registries (~57,000 entries) for offline vendor name resolution.
Right-Click Actions: Facilitates quick access to device details and network actions like opening web UIs or initiating RDP/SSH sessions.
Privacy Focused: Operates entirely on the local machine with no external agents, accounts, cloud lookups, or telemetry, ensuring data security and privacy.

Audience & Benefit:

Ideal for field technicians, MSPs, and sysadmins who require precise network insights without relying on external services. KillerScan enhances productivity by providing a portable, self-contained solution that delivers accurate device identification and classification, enabling efficient troubleshooting and network management. Its comprehensive features and focus on privacy make it an essential tool for professionals seeking reliable network visibility.