Skip to content

KillerScan v1.5.0

Choose a tag to compare

View all tags
@SteveTheKiller SteveTheKiller released this 28 Jun 14:16
v1.5.0
88c5c64

KillerScan v1.5.0

Discovery

  • mDNS (Bonjour) and SSDP (UPnP) service discovery to catch Chromecasts, printers, Sonos, AirPlay, Roku, Plex and Synology devices
  • Second ARP pass after the ping sweep to catch phones and ICMP-blocking devices

Vendor lookup

  • Full IEEE OUI registries (MA-L, MA-M, MA-S) with longest-prefix matching
  • Brand overrides for "Private" MAC blocks (e.g. Govee)
  • Clear "(Randomized)" label for locally-administered privacy MACs
  • In-app vendor database updater in the About screen: shows entry count and last refresh, one-click update from the Wireshark OUI list, and reports "already up to date" when nothing changed

Classification

  • Weighted-score classifier across ports, OUI, hostname, HTTP title, SSH banner, TLS subject, SNMP, NetBIOS, TTL, mDNS and SSDP signals
  • Gateway/DNS aware (Router, DNS Server, Router/DNS - Pi-hole safe)
  • PC/workstation vendors with no open ports now classify as Windows instead of IoT

UI

  • Themed tooltips that match the current theme
  • Rounded results-table header with hover/press and sort-direction chevron
  • Scroll wheel scrolls the table even with the theme flyout or context menus open
  • Six themes; UI scaffolded for 8 languages (English active, others in progress)

Downloads

  • KillerScan.exe (2.63 MB) - portable single EXE, no runtime install
  • KillerScan-1.5.0-src.zip - GPLv3 corresponding source

SHA-256 (KillerScan.exe): C9C292EBD969252ABDBFF597A6C434A9BF48722A114D809D60DB00BEA444C7AF

Assets 4
Loading