Description
Performs a parallelized ICMP ping sweep across specified targets or all local networks to discover alive hosts, with optional DNS name resolution.
Overview
Performs a parallelized ICMP ping sweep to discover alive hosts on a network. Targets can be specified explicitly as IPs or CIDR ranges, or the script can automatically discover and scan all eligible local network interfaces (interfaces that are up, have more than 2 ARP entries, and have a CIDR >= /23).
When -ResolveNames is specified, the script performs reverse DNS lookups on alive hosts to resolve hostnames, similar to ping -a.
Arguments
| Parameter | Type | Description |
|---|---|---|
| Targets | string[] | One or more IP addresses or CIDR ranges to sweep. If not specified, automatically scans all eligible local networks. |
| ThreadCount | int | The number of concurrent threads to use for parallel scanning. Default: 64. |
| Timeout | int | The ICMP ping timeout value in milliseconds. Default: 1000. |
| ResolveNames | switch | Perform reverse DNS lookups on alive hosts to resolve hostnames. |
Dependencies
- Recon
Operating Systems
- Windows
Example Text Output
IPAddress Status RoundtripTime TTL Hostname
--------- ------ ------------- --- --------
192.168.1.1 Alive 1 128 router.lab.net
192.168.1.2 Alive 0 128 dc01.lab.net
192.168.1.100 Alive 0 128 linux01.lab.net
192.168.1.101 Alive 0 128 dev.lab.net
192.168.1.103 Alive 0 128 wkst-001.lab.net
Example JSON Output
[
{
"IPAddress": "192.168.1.1",
"Status": "Alive",
"RoundtripTime": 1,
"TTL": 128,
"Hostname": "router.lab.net",
"Network": "192.168.1.0/24"
}
]