Network Security Scanner

Overview

The SSL and Web Analyzer scans IP ranges (including AWS and Google Cloud networks) to discover services, subdomains, endpoints, and potential vulnerabilities. It functions like a Shodan-style search engine, with a focus on infrastructure that larger scanners might miss. It's built for security professionals, bug bounty hunters, and penetration testers to expand their attack surface analysis.

Key Features

• WAF Bypass: Identifies IP addresses hidden behind Web Application Firewalls.
• Fast IP Scanning: Efficiently scans millions of IPs using Masscan.
• Subdomain & Endpoint Discovery: Reveals new subdomains and endpoints to assess.
• Vulnerability Detection: Identifies weaknesses in web servers and applications.
• Flexible Input: Accepts both CIDR ranges and individual IP addresses.
• Proxy Support: Configurable proxy for anonymity and geo-specific access.

How to Use

1. Create a free Apify account.
2. Open the SSL and Web Analyzer actor in the console.
3. Configure the input (see Input section below).
4. Click "Start" to run the scan.
5. Download results in JSON, XML, CSV, Excel, or HTML format for analysis.

A quick Video Tutorial is available on YouTube.

Input

Configure the scan using these parameters in the actor's input form:

• Use Masscan for Scanning (Checkbox): A boolean flag. If checked, you must provide at least one IP range in CIDR format. If unchecked, you can provide a list of individual IPs and Masscan will be skipped.
• CIDR or IP Addresses: Provide your targets. Use either:
  • IP ranges in CIDR format (e.g., 192.168.1.0/24).
  • A list of individual IP addresses.
• Masscan Ports (Optional): Ports to scan with Masscan. Default is 443. You can specify multiple ports (e.g., 80, 443) or a range (0-65535). Required only when Masscan is enabled.
• Masscan Rate (Optional): Rate limit for Masscan in packets per second. Required only when Masscan is enabled.
• Maximum Results Limit (Optional): Cap the total number of results returned.
• Proxy Configuration (Optional): Use Apify Proxy to anonymize scans or target specific geographical regions.

[!NOTE]
If you provide multiple IP ranges, results will not appear until Masscan has completed scanning all ranges.

Output

The actor returns structured data containing the scan results, which you can download in multiple formats for further investigation. The output includes discovered IPs, services, subdomains, endpoints, and identified security findings.