ACTIVECybersecurityrevealr.rounakneema.in

Revealr

Adaptive Network Scanner with Vulnerability Mapping

GOPYTHONSQLITE

// Problem

Traditional scanners give port status and generic vulnerability results, but lack stateful tracking and extensibility to detect network drift or map vulnerabilities offline.

// Solution

A hybrid adaptive network scanner achieving 50k ports/min with a stateful SQLite-backed engine and modular Python vulnerability mapping.

// Overview

Revealr is a high-performance network scanner built in Go. It uses raw sockets for custom packet generation and achieves throughput of 50k ports/minute. It features a stateful engine using SQLite to resume scans and perform historical diffing to detect new services. A Python plugin system allows custom service fingerprinting and offline vulnerability checks without recompiling the core. Scanning profiles (Paranoid, Stealthy, Polite) control timing behavior based on engagement requirements.

// Breakdown

Throughput

Achieves 50,000 ports/minute scan throughput on local networks using raw sockets.

Architecture

Stateful engine with SQLite for resuming interrupted scans and historical service diffing (Network Drift).

Extensibility

Python plugin system for custom service fingerprinting and offline vulnerability mapping.

Outcome

Reduced recon time significantly and provided actionable difference reports between scans.

VIEW SOURCE READ WRITEUP

// At a Glance

Throughput

50k pps

Language

Persistence

SQLite

Plugins

Python

// Tech Stack

GoPythonSQLiteRaw SocketsConcurrency

bash

➜~./revealr -target 10.10.11.0/24 --rate 50000

[+] Target: 10.10.11.15 (Linux/Ubuntu)

├── 22/tcp OPEN (ssh)

├── 80/tcp OPEN (http) → nginx/1.18.0

└── 8080/tcp OPEN (http) → Node.js Express

[DIFF] New service detected since last scan: 8080/tcp

[*] Scan complete in 0.8s (50k pps)