hardscan

Hardscan is a software tool that can efficiently replace the functionality of the Local Netstat. The software is designed to scan for open ports through a unique mechanism known as ‘binding’. The scanner initiates a unique handshake with each of the open ports to determine if there is any unauthorized access. This hard way of scanning makes Hardscan ideal for conditions where the system may have been compromised, with malware or other hacking tools, leading to the output of traditional security tools such as netstat, becoming unreliable.

Hardscan has a unique ability to detect if a UDP or TCP port is already in use. If the software is unable to establish a connection with itself due to any reason, like a port being already in use or any interception, it serves as an indicator of an existing connection. While such a connection may be a sign of a potential trojan, virus, or hacker attempt, it can also be a harmless legitimate connection. With Hardscan, Ephemeral high-numbered ports are also scanned, leading to the detection of any potential outgoing activity.

One of Hardscan's most significant features is its fast mode. While in this mode, the software abandons the self-handshake verification process. Although in theory, the operating system could deceive the scanner by making it appear that a socket has been opened successfully, this is unlikely, and most trojans would not be that advanced. The fast mode, while less rigorous, allows for a much faster scan, making it perfect for bulk scans or rapid detection needs.