{"id":4332,"date":"2017-01-17T02:44:47","date_gmt":"2017-01-16T18:44:47","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=4332"},"modified":"2017-01-17T02:45:03","modified_gmt":"2017-01-16T18:45:03","slug":"zgrab-an-application-layer-scanner-for-zmap","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2017\/01\/zgrab-an-application-layer-scanner-for-zmap\/","title":{"rendered":"ZGrab &#8211; Application Layer Scanner For ZMap"},"content":{"rendered":"<p>ZGrab is a Go-based application layer scanner that operates with <a href=\"https:\/\/www.darknet.org.uk\/2014\/10\/zmap-fast-open-source-network-scanner\/\">ZMap<\/a> and supports multiple protocols and services including TLS, IMAP, SMTP, POP3 etc.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/01\/ZGrab-Application-Layer-Scanner-For-ZMap-640x302.png\" alt=\"ZGrab - Application Layer Scanner For ZMap\" width=\"640\" height=\"302\" class=\"aligncenter size-medium wp-image-4400\" \/><\/p>\n<p>It also stores TLS version and can detect <a href=\"https:\/\/www.darknet.org.uk\/2014\/04\/heartbleed-bug-ssl-vulnerability-everything-need-know\/\">Heartbleed<\/a>.<\/p>\n<h3>Building<\/h3>\n<p>You will need to have a valid <code>$GOPATH<\/code> set up, for more information about <code>$GOPATH<\/code>, see <a href=\"https:\/\/golang.org\/doc\/code.html\">https:\/\/golang.org\/doc\/code.html<\/a>.<\/p>\n<p>Once you have a working <code>$GOPAT<\/code>H, run:<\/p>\n<pre>go get github.com\/zmap\/zgrab<\/pre>\n<p>This will install zgrab under <code>$GOPATH\/src\/github.com\/zmap\/zgrab<\/code><\/p>\n<pre>$ cd $GOPATH\/src\/github.com\/zmap\/zgrab\r\n$ go build<\/pre>\n<h3>Usage<\/h3>\n<pre>zgrab [-banners] [-ca-file file ] [-cbc-only] [-data message ] [-ehlo]\r\n       domain ] [-encoding encoding ] [-heartbleed] [-imap] [-input-file  file\r\n       ]  [-interface  interface  ]  [-log-file  file ] [-metadata-file file ]\r\n       [-modbus] [-output-file file ] [-pop3] [-port port ] [-senders  senders\r\n       ]  [-smtp]  [-smtp-help]  [-starttls] [-timeout timeout ] [-tls] [-tls-\r\n       version version ] [-udp]<\/pre>\n<p>Example:<\/p>\n<pre># zmap -p 443 --output-fields=* | ztee results.csv | zgrab --port 443 --tls --http=\"\/\" --output-file=banners.json<\/pre>\n<p>You can download ZGrab here:<\/p>\n<p><a href=\"https:\/\/github.com\/zmap\/zgrab\/archive\/v0.0.1.zip\">zgrab-v0.0.1.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/zmap\/zgrab\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>ZGrab is a Go-based application layer scanner that operates with ZMap and supports multiple protocols and services including TLS, IMAP, SMTP, POP3 etc. It also stores TLS version and can detect Heartbleed. Building You will need to have a valid $GOPATH set up, for more information about $GOPATH, see https:\/\/golang.org\/doc\/code.html. Once you have a working [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"ZGrab is a Go-based application layer scanner that operates with ZMap and supports multiple protocols and services including TLS, IMAP, SMTP, POP3 etc.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9,5],"tags":[8858],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4332"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=4332"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4332\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=4332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=4332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=4332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}