A full network recon & security scanner — port scan, DNS trace, subdomain discovery, ARP sweep, proxy filter, path enumeration, and CVE detection in one tool
git clone https://github.com/MatrixTM26/HTONSpider.git
cd HTONSpidergo build -o htonspider .Tool Help
./htonspider -hPort Scan
./htonspider -m port -s example.com./htonspider -m port -s example.com -p 1-1024 -b -T 300 -t 500 -e scan.txt./htonspider -m port -s example.com -p all -U -T 500 -t 400DNS Resolve & Trace
./htonspider -m dns -s example.com./htonspider -m dns -s example.com -e dns.txtSubdomain Discovery
./htonspider -m sub -s example.com./htonspider -m sub -s example.com -W wordlist.txt -T 50 -e subdomains.txtARP Network Scan
./htonspider -m arp -s 192.168.1.0/24./htonspider -m arp -s 192.168.1.0/24 -T 100 -e hosts.txtProxy / IP Checker
./htonspider -m proxy -s proxies.txt -A -e alive.txt./htonspider -m proxy -s 103.10.1.1:8080,103.10.1.2:3128 -T 50 -t 5000Path & File Discovery
./htonspider -m path -s https://example.com./htonspider -m path -s https://example.com -W paths.txt -T 30 -e found.txtService & Vulnerability Detection
./htonspider -m vuln -s example.com./htonspider -m vuln -s example.com -p 80,443,22,3306 -e report.txtFull Scan
./htonspider -m full -s example.com./htonspider -m full -s example.com -W wordlist.txt -p 1-1024 -T 200 -V -e full.txt
| Flag | Value | Description |
|---|---|---|
-m |
mode |
Scan mode: port dns sub arp proxy path vuln full |
-s |
target |
Host, IP, CIDR, comma-list, or file path |
-p |
range |
Port range: 80,443 | 1-1024 | all | common |
-t |
ms |
Timeout in milliseconds (default: 800) |
-T |
n |
Concurrent threads (default: 200) |
-W |
file |
Wordlist file for subdomain or path discovery |
-e |
file |
Export results to file |
-A |
Alive-only export (proxy mode) | |
-U |
Also run UDP scan alongside TCP | |
-b |
Grab service banners | |
-V |
Verbose / debug output | |
-n |
Skip ASCII banner |
- Author: @MatrixTM26
- License: AGPL-V3
Copyright ©2023-2026 MatrixTM26 · All Rights Reserved