// what it is
Description
Robert Graham's stateless port scanner that talks raw IP. Same command-line spirit as Nmap but ~1000× faster on flat scans because it doesn't maintain TCP state — fires SYNs as fast as the NIC allows and reads replies asynchronously.
// use cases
What people use it for
- Initial sweep of a /16 or /8 before drilling down with Nmap
- Internet-wide research (with permission!) on a single port
- Quick check 'is anything listening on this range'
// commands
The commands you'll type
Sweep /24, single port
$ masscan 10.0.0.0/24 -p 80 --rate 1000Top 100 TCP ports
$ masscan 192.168.1.0/24 -p 1-1000 --rate 10000