A Scanner You Run from a USB Drive

With no decent Windows network scanner available for MSP field work, the developer built KillerScan and released it under GPLv3. It ships as a single exe with no installer, no accounts, no license server, and no telemetry, weighing in at about 508 KB compressed, and requires .NET 8 to run.

The core behavior is as follows.

• ARP cache + parallel ping sweep to catch IoT devices or equipment behind firewalls that ignore ICMP.
• TCP detection across 24 common service ports.
• Active fingerprinting by combining HTTP title/Server header, SSH banner, TLS cert subject, NetBIOS (UDP 137), SNMPv1 sysDescr (UDP 161), and ICMP TTL.
• MAC OUI vendor lookup based on the IEEE registry.
• A weighted-score classifier that determines device type by aggregating multiple signals rather than matching on the first port found.
• IP/MAC/hostname copying, launching RDP/SSH/browser, manual type correction, and CSV/HTML export.

The distribution philosophy is clear as well. It aims to be a tool you drop on a USB drive and use immediately with no installation, and GPLv3 was chosen specifically to prevent closed-source forks from being resold. Since this is the first open-source release, the repository is still rough, CI, contribution docs, and release automation are unfinished, and the developer plans to apply for signed builds from the SignPath Foundation going forward.