XTLS_RealiTLScanner/README.md

Reality - TLS - Scanner

Building

Requirement: Go 1.21+

go build

Usage

It is recommended to run this tool locally, as running the scanner in the cloud may cause the VPS to be flagged.

# Show help
./RealiTLScanner

# Scan a specific IP, IP CIDR or domain:
./RealiTLScanner -addr 1.2.3.4

# Scan a list of targets from a file (targets should be divided by line break):
./RealiTLScanner -in in.txt

# Crawl domains from a URL and scan:
./RealiTLScanner -url https://launchpad.net/ubuntu/+archivemirrors

# Specify a port to scan, default: 443
./RealiTLScanner -addr 1.1.1.1 -port 443

# Show verbose output, including failed scans and infeasible targets:
./RealiTLScanner -addr 1.2.3.0/24 -v

# Save results to a file, default: out.csv
./RealiTLScanner -addr www.microsoft.com -out file.csv

# Set a thread count, default: 1
./RealiTLScanner -addr wiki.ubuntu.com -thread 10

# Set a timeout for each scan, default: 10 (seconds)
./RealiTLScanner -addr 107.172.1.1/16 -timeout 5

Example stdout:

2024/02/08 20:51:10 INFO Started all scanning threads time=2024-02-08T20:51:10.017+08:00
2024/02/08 20:51:10 INFO Connected to target feasible=true host=107.172.103.9 tls=1.3 alpn=h2 domain=rocky-linux.tk issuer="Let's Encrypt"
2024/02/08 20:51:10 INFO Connected to target feasible=true host=107.172.103.11 tls=1.3 alpn=h2 domain=rn.allinai.dev issuer="Let's Encrypt"
2024/02/08 20:51:13 INFO Connected to target feasible=true host=107.172.103.16 tls=1.3 alpn=h2 domain=san.hiddify01.foshou.vip issuer="Let's Encrypt"
2024/02/08 20:51:13 INFO Connected to target feasible=true host=107.172.103.19 tls=1.3 alpn=h2 domain=mgzx19.cnscholar.top issuer="Let's Encrypt"
2024/02/08 20:51:13 INFO Connected to target feasible=true host=107.172.103.22 tls=1.3 alpn=h2 domain=hy2.znull.top issuer=ZeroSSL
2024/02/08 20:51:21 INFO Connected to target feasible=true host=107.172.103.37 tls=1.3 alpn=h2 domain=c1.webgenbd.com issuer="Let's Encrypt"
2024/02/08 20:51:23 INFO Connected to target feasible=true host=107.172.103.46 tls=1.3 alpn=h2 domain=racknerd.myideal.xyz issuer="Let's Encrypt"
2024/02/08 20:51:38 INFO Scanning completed time=2024-02-08T20:51:38.988+08:00 elapsed=28.97043s

Example output file:

IP,DOMAIN,CERTIFICATE
85.158.4.237,mirror.scaleuptech.com,"Let's Encrypt"
193.224.218.31,mirror-r2z1.einfra.hu,"Sectigo Limited"
103.77.111.8,repos.del.extreme-ix.org,"Let's Encrypt"
103.56.39.228,*.nxtgen.com,"DigiCert Inc"
103.77.111.8,repos.del.extreme-ix.org,"Let's Encrypt"
45.125.0.6,xtom.com.hk,"ZeroSSL"
196.200.160.70,mirror.marwan.ma,"Let's Encrypt"
202.70.64.2,*.ntc.net.np,"GlobalSign nv-sa"
5.79.108.33,mirror.leaseweb.com,"Let's Encrypt"
78.142.193.130,xtom.nl,"ZeroSSL"
194.127.172.131,nl.mirrors.clouvider.net,"Let's Encrypt"
103.194.167.213,*.cdn.i3d.net,"Sectigo Limited"
202.36.220.86,mirror.2degrees.nz,"Let's Encrypt"