ZGrab
Tool and Usage
Project details
- License
- Apache License 2.0
- Programming language
- Golang
- Author
- David Adrian
- Latest release
- 0.0.1
- Latest release date
Project health
Links
 | ZGrap GitHub project |
Introduction
ZGrab is a stateful application-layer scanner. It works together with ZMap and is also part of the ZMap project. ZGrab is written in Go and supports multiple protocols, including:
- BACNET
- HTTP
- HTTPS
- FTP
- IMAP
- POP3
- Modbus
- Siemens S7
- SMTP
- SSH
- Telnet
- Tridium Fox
Why this tool?
This tool can be used to grab banner of services, including those using SSL/TLS. Such usage can be useful for security assessments or find out what particular service is running on an internal system.
Usage and audience
ZGrab is commonly used for penetration testing, security assessment, or vulnerability scanning. Target users for this tool are pentesters.
Tool review and remarks
The review and analysis of this project resulted in the following remarks for this security tool:
Strengths
- + The source code of this software is available
ZGrab alternatives
Similar tools to ZGrab:
Certificate Transparency
Google's Certificate Transparency project audits the way SSL/TLS certificates are used and its underlying cryptographic system.
Lemur
Lemur manages TLS certificate creation and the underlying process that is required. It acts as a broker between a certificate authority (CA) and the environment
MassBleed
MassBleed is a SSL vulnerability scanner to check for several known vulnerabilities and attacks like DROWN, POODLE, and ShellShock.
This tool page was updated at . Found an improvement? Help the community by submitting an update.
Related tool information
Categories
This tool is categorized as a application layer scanner and banner grabbing tool.