NProbe-RS

项目说明

NProbe-RS is a Rust-nati scanner for authorized internal and lab use, with explainable output, defensi, and multi-engine execution.

It reimplements familiar scanning workflows with a modern Rust architecture while helping users understand *why* results matter, not just what was found.

: v4.5 "Rusty Nail" <br>
Edition: 2026 Edition <br>
Author: <br>
Contact: .com

---

✨ Why NProbe-RS?

NProbe-RS is designed to make network reconnaissance understandable and safe by default.

Instead of only reporting open ports, it explains findings, highlights risks, and provides defensi — making it ideal for:

🎓 Students & learners

🛡️ Blue teams & defenders

🧪 Lab en

🧑‍💻 Internal reviews

🔬 Security research

The project is publishable in its current supported scope as a defensi. Concepts documented under docs/scan-types/ are not automatically equi to li paths; use nprobe-rs --scan-type to inspect what is currently implemented cataloged.

---

🧩 Features

🔎 Explainable scan results with defensi

🎯 Nmap-style command flow (nprobe-rs <target>) and first-class nprs alias

⚡ Rust async engine for high-performance scanning

🧵 Thread-pool DNS resolution

🧠 Parallel analysis using Rayon

🧪 Lua hooks for custom probes & automation

📄 Multi-format output: CLI, TXT, JSON, HTML, CSV

🚦 Cleaner terminal output (focused, less noisy by default)

🛡️ Safety controls to prevent unintended scanning

🔐 Auto pri ele for root-required scan modes on Linux/macOS (sudo/doas where a)

⚙️ Persistent configuration & last-run metadata

---

📚 Scan Types

Use nprobe-rs --scan-type or nprs --scan-type for the canonical li. Status are implemented, partial, and planned.

Shortcut notes:

Legacy Nmap host-discovery alias -sP is accepted as --ping-scan.

Project-specific live scan shortcuts are also accepted: -sPH (phantom), -sKI (kis), -sSR (sar), -sID (idf), -sMR (mirror), -sHY (hybrid), -sCB (callback-ping).

Implemented runtime lanes:

Discovery: arp

Classic: connect, syn, udp

Safe control/e: source-port-pin

Enrichment: banner, aggressi

Hybrid/timing: hybrid, timing-profile

New project-specific defensi: phantom, kis, sar, tbns, idf, mirror, callback-ping

Partial lanes:

Discovery: ping-scan, icmp-echo

Enrichment: os-fingerprint, script-scan, traceroute

Cataloged but not li lanes:

Discovery: icmp-timestamp, icmp-netmask, tcp-ping, tcp-syn-ping, tcp-ack-ping, udp-ping, sctp-init-ping, ip-proto-ping

Classic: ack, maimon, custom-scanflags, ip-protocol, sctp-init, sctp-cookie

Combo recipes: kinetic-fingerprint, so

Cataloged and intentionally not exposed as li features:

ftp-bounce, window, fragment, decoy, spoof-source, interface-bind

O and detailed docs:

Scan Types O

Phantom Scan

KIS Scan

SAR Scan

TBNS Family

Service Detection Intelligence

Service Knowledge Architecture

---

🛡️ Safety Controls

NProbe-RS promotes responsible usage through built-in safeguards:

--lab-mode → restricts scans to safe lab en

--allow-external → explicitly allow external targets

--strict-safety → enforces conser scan behavior

---

🚀 Quick Start

Installer scripts place both nprobe-rs and the short alias nprs on disk. cargo install --path . now installs both first-class binaries as well.

---

✅ Release Quality Gates

Run these before publishing or tagging a release:

For the full release checklist, see RELEASE.md.

GitHub Actions now the crate on Linux, macOS, and Windows, and tagged releases package both nprobe-rs and nprs with per-archi checksums.

---

⚙️ Acceleration Engines

Go async/user-space engine: a on Linux, macOS, and Windows.

Raw packet crafting engine: a on Linux and Windows when elevated raw-socket access is present; the safety go blocks the kernel-bypass lane when the host is not ready.

AF_XDP zero-copy backend: Linux-only optional build path via --features afxdp; current builds treat it as a scaffolded backend and fall back automatically when the host cannot sustain it.

GPU acceleration controls: Linux and Windows only; current builds use a go hybrid bridge around the packet crafter en rather than a standalone GPU packet backend.

macOS: GPU control flags are denied explicitly, and scans stay on the go async/user-space lanes.

---

🧪 Common Usage

---

📄 Output Controls

---

⚡ Shortcut Aliases

---

🧾 Flag Help Mode

---

🧠 Example (Explain Mode)

---

⚙️ How It Works

Architecture study and reimplementation inspired by Nmap's design principles

Async scanning engine with adapti

Multi-stage intelligence pipeline: raw discovery -> async probe narrowing -> targeted fingerprint matching

Service and port mapping with built-in defaults and optional local data loading

Fingerprint and probe parsing where supported

Modular design for extensibility and scripting

---

📝 Notes

temp/ is ignored in git so local study artifacts are not committed.

Service names and top-port ranking load from temp/nmap/nmap-services when present.

Fingerprint rules and probe payloads parse from temp/nmap/nmap-ser where supported.

On startup, NProbe-RS creates ~/.nprobe-rs-config/config.ini for persistent settings.

By default, output is printed to console unless --output, --location, or --file-type is provided.

nprobe-rs scan <target> is still supported for compatibility, but nprobe-rs <target> is preferred.

Timeout short flag is -w (--timeout-ms), while Nmap-style timing shortcuts use -T0..-T5.

Supported host platforms are Linux, macOS, and Windows.

Root-required scan modes auto-attempt ele on Linux and macOS when possible.

---

📦 Installation Helpers

Cross-platform install scripts are provided in building-scripts/. The flow now mirrors the common Nmap pattern: use nati/source prerequisites on Unix, then install into a con bin directory; use the PowerShell/CMD installer path on Windows.

Linux / macOS

Notes:

Linux dependency installation uses the detected distro package manager.

macOS dependency installation expects Xcode Command Line Tools plus Homebrew.

uninstall removes both nprobe-rs and nprs from the detected install directory and can resol installs, PATH- installs, and the standard Cargo bin location. Pass --install-dir for a custom target.

Windows PowerShell

Notes:

uninstall removes both nprobe-rs.exe and nprs.exe from the detected install directory and can resol installs, PATH- installs, and the standard Cargo bin location. Pass -InstallDir for a custom target. Cargo bin PATH entries are left intact.

Windows CMD

Installed command name:

nprobe-rs and nprs (Linux/macOS)

nprobe-rs.exe and nprs.exe (Windows)

---

⚖️ Legal & Ethical Use

NProbe-RS is intended for:

authorized security testing

lab en

educational use

defensi research

Always obtain proper authorization before scanning networks you do not own or manage.

This repository intentionally favors bounded, explainable, low-impact behavior o, spoofing, or decepti injection.

---

🛣️ Roadmap (Planned)

🧬 Service/ enrichment and better fingerprint confidence reporting

🗺️ Network topology

🔄 Baseline comparison & drift detection

🧠 Adaptive scan intelligence

🚀 AF_XDP zero-copy packet backend (Linux, kernel-bypass path)

📦 Prebuilt binaries for major platforms

---

🤝 Contributing

Contributions, ideas, and feedback are welcome!

If you’d like to impro, feel free to open an issue or submit a pull request.

---

⭐ Acknowledgment

NProbe-RS draws inspiration from the design principles of Nmap while reimplementing core ideas with a modern Rust architecture focused on safety, clarity, and extensibility.

---

📜 License

SPDX-License-Identifier

项目信息

开发语言：Rust

Star 数：4

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕NProbe-RS: A hybrid network scanner project having GPU acceleration.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。

登录后才能参与讨论

下载链接

会员才能下载

登录后开通会员

同分类推荐

暂无同类资源

资源标题	NProbe-RS - NProbe-RS: A hybrid network scanner project having
所属分类	防护思路
发布作者	admin
发布时间	2026-10-06 00:16:12
下载权限	免费下载
附件数量	2 个下载链接
浏览次数	169
讨论数量	0
主题状态	正常讨论中

NProbe-RS - NProbe-RS: A hybrid network scanner project having