Port Mass Scan Skill

High-speed port scanning methodology using RustScan for single hosts and Masscan for large IP ranges. RustScan provides 400x speedup over Nmap for 1000-port scans (3-10s vs 5-10min). Masscan handles /8 and /16 ranges that Nmap cannot. The ISP and government network examples below were from authorized infrastructure assessments with signed RoE.

When to Use

• Authorized red team engagement with signed RoE covering the target IP range.
• Fast single-host port discovery before Nmap service enumeration.
• After subdomain-enumeration — scan resolved IPs for non-HTTP services.
• ISP-wide or /8 scanning without explicit written authorization is illegal in most jurisdictions. This skill exists for legitimate authorized engagements, not mass scanning.

Prerequisites

• terminal with masscan, rustscan, and nmap installed.
• For Masscan: root access (uses raw sockets), libpcap.
• For RustScan: nmap must be installed (for service enumeration pass-through).

How to Run