NetScanTools Pro Edition is an integrated collection of internet information gathering utilities for Windows Vista/2008/2003/XP/2000. Use it to research IP addresses, hostnames, domain names, email addresses, URLs automatically** or with manual tools.

**Automated tools are started interactively by the user. By Automated we mean that several tools are used to do research, then the results are presented in your web browser.

Benefits

• Saves time when you need to gather information about Internet or local LAN network devices, IP addresses, domains, device ports, and many other network specifics.
• Removes the guess-work from Internet investigation by automating research requiring multiple network tools.
• Produces clear, concise results reports in the format that you prefer - web page or a file easily imported by a spreadsheet.
• Greatly enhances many standard network tools.
• At $249 US List Price (ESD Full Download or on CDROM with extra shipping cost), NetScanTools Pro represents the best value of any investigative tool!
• Also available as a USB Flash Drive portable application -- separately priced and includes a USB Flash Drive.

Multiple Solutions in one package

• A Network Information Gathering, Reconnaissance and Discovery Solution
   

  • Powerful Core DNS Tools. You specify the DNS you want to work with. Then use NSLOOKUP or DiG to retrieve any of 44 resource record types from a DNS. Use DiG +trace to check a domain name or IP address by starting at the root servers and moving downwards to the authoritative DNS. Need bulk or batch processing of a list of IP addresses or hostnames? Create a text list of IP addresses or hostnames for batch processing using one of the tools.

  • Check a Domain's Zone in DNS. Two types of Zone Transfer are ready for you for help you review a zone. One automatically selects the Authoritative DNS for the zone and the other lets you enter it manually.

  • Powerful Advanced DNS Tools. These are specialized DNS tools that show you things not easily found with NSLOOKUP. Auth Serial Check can be used to make sure a domain's authoritative name server zone serial numbers are in sync. DNS S/W Version can show the actual software version number a DNS is running. DNS Verify does an IP to Hostname to IP mapping check. IP Drilldown takes an IPv4 address and shows the arpa namespace records (SOA, NS, TXT, A etc.) for all 4 levels of an IP address. ENUM accepts a VOIP telephone number and queries an ENUM e164 root server for the SIP or H323 records. SPF/Domain Keys shows those records for domain so you can check email authentication processes. Need bulk or batch processing of a list of IP addresses or hostnames? Create a text list of IP addresses or hostnames for batch processing using one of the tools.

  • Check your computer's default DNS resolver. A resolver is software that accepts an IP address or hostname, then queries DNS for the corresponding record. We have a Simple Query tool for checking the ability of the resolver to process a query. The Test Default DNS tool verifies each of the default DNS's assigned to your system and checks their timing and ability to respond.

  • Find out who owns a domain name or an IP address fast with our advanced whois and rwhois query tools that feature automatic whois server selection.

  • Where is an IP address located? Our IP to Country tool can show you the country it is supposed to be located in. This feature is also integrated into whois and traceroute.

  • Find active devices in any IPv4 address range using our ping sweep utility called NetScanner.

  • Find hidden IPv4 devices on your local network segment (LAN). ARP Scan exposes hidden devices that do not respond to ping.

  • Find visible, hidden and writable shares in a Microsoft Windows Domain. NetBIOS share detection shows visible and hidden shares. It can do a writable share test find shared directories exposed to attacks by worms and viruses.

  • Find open TCP or UDP ports on a device. The Port Scanner tool uses several different methods to determine if a TCP or UDP port is open or active  on a target machine.

  • Display DHCP Server offerings and find rogue DHCP Servers. DHCP Server Discovery finds rogue (unknown) or misconfigured DHCP servers.

  • Find the route packets are taking from your machine to a target machine. Traceroute includes the firewall penetrating TCP traceroute plus standard ICMP and UDP traceroute methods.

  • Validate an Email Address. Email Address Validation can tell you if an email address will work.

  • Test SMTP email servers. Send test mail and check for an Open Relay.

  • Capture packets from your network. Packet Viewer captures packets coming to your wired ethernet card. Preserve packet data for future analysis and export packet captures to other programs like WireShark.

  • Gather data from network devices using our Simple Network Management Protocol (SNMP) tools. SNMPv1/v2c tools include walk, get, set and several advanced queries such as remote ARP cache, remote listening ports and more. The SNMP Dictionary Attack tool can try to guess the community name of an SNMP enabled device.

  • Find and keep track of IP/MAC Address Mappings. IP and MAC address associations found using NetScanner, ARP, SNMP, and NetBIOS can be automatically updated and maintained in the IP/MAC address management database.

  • Numerous useful utilities like Subnet Calculator, TTCP for network speed checking, Ping, ARP Ping, and safe URL web page capture with obscured URL decoding.

  • Map Network Switches. The optional Manage Switch Port Mapping tool works with many brands of SNMP enabled managed ethernet network switches to show devices connected to the switch ports.
     

• A Security Testing Solution
   
  • Find hidden IPv4 devices on your local network segment (LAN). ARP Scan shows all active IPv4 connected devices even if those devices have an integrated firewall protecting them from standard ping sweep or port scan methods.
  • Find IPv4 devices on any reachable network. NetScanner uses ping sweep to find IPv4 connected devices on any reachable IPv4 network.
  • Find devices listening to network traffic on your local network segment (LAN). Promiscuous Mode Scanner shows devices listening to (snooping/sniffing) network packet traffic.
  • Check a device for listening TCP or UDP ports. Port Scan checks for unauthorized or unintentionally installed services or open listening ports on IPv4 connected devices.
  • Test the response of a device or firewall to TCP/UDP/ICMP or CDP packets. Packet Generator (TCP/UDP/ICMP/CDP) along with Packet Viewer can assist in testing systems and firewalls for response to unusual customized packets.
  • Find visible, hidden and writable shares in a Microsoft Windows Domain. NetBIOS share detection shows visible and hidden shares. It can do a writable share test find shared directories exposed to attacks by worms and viruses.
  • Find IPv4 address owner or allocated business and what country they are from. Our advanced whois and rwhois query tool shows who owns the IP address showing up in your logs.
  • Examine Internet Explorer caches. Cache Forensics shows Internet Explorer history, cache and cookie information plus it shows Protected Storage information containing passwords and IE auto-complete data for the currently logged in user.

  • Check for misconfigured SMTP servers. Email Address Validation and Open SMTP Relay Checking show configuration issues with SMTP servers.
     

• A Training Solution
   
• NetScanTools Pro is a great tool to help train people on the workings of various TCP/IP utilities. You can also use it to demonstrate security vulnerabilities and some of the common techniques used to map and access networks and machines.
• NetScanTools Pro is used in network security and reconnaissance or traceback training courses taught by Laura Chappell of the Protocol Analysis Institute.
• A "whitehat" toolkit used in "ethical hacking" training courses.