KillerScan

KillerScan sweeps a network and tells you what is on it: routers, printers, cameras, servers and workstations, not a list of IP addresses.

It reads the ARP cache, runs a parallel ping sweep, then reads ARP a second time, so devices that ignore ping but answer ARP still show up.

Every device found is then examined at the same time: common ports are probed, and it actively fingerprints across HTTP, SSH, TLS, NetBIOS and SNMP, asks DNS and mDNS for a name, and looks up the manufacturer from the hardware address against a bundled Wireshark OUI database of over 57,000 entries.

All of that feeds a weighted scoring system that classifies each device into one of 21 types. Anything it gets wrong you can override by hand, and a deep rescan re-examines just the devices you select.

Scan several networks in one pass: the target box takes a comma-separated list of CIDR blocks, single hosts and ranges, written in full or with just the last octet on the right.

Ships as a single portable executable, or install it for yourself or for all users. No runtime to chase, no agent, no account, no subscription, and no telemetry of any kind. Free and open source under GPLv3. Ten interface languages.