> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aiptx.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Network Scanning

> Network infrastructure security testing

# Network Scanning

AIPTx can scan network infrastructure for security vulnerabilities.

## Basic Network Scan

```bash theme={null}
aiptx scan 192.168.1.0/24 --type network
```

## Configuration

```yaml theme={null}
network:
  targets:
    - 192.168.1.0/24
    - 10.0.0.1-10.0.0.50

  ports:
    common: true          # Top 1000 ports
    custom: [8080, 8443, 9000]
    range: "1-65535"      # Full scan (deep mode)

  service_detection: true
  version_detection: true
  os_detection: true
```

## Tests Performed

| Test                | Description                   |
| ------------------- | ----------------------------- |
| Port scanning       | Open ports discovery          |
| Service detection   | Running services              |
| Version detection   | Software versions             |
| CVE matching        | Known vulnerabilities         |
| SSL/TLS analysis    | Certificate and cipher issues |
| Default credentials | Common service passwords      |

## Service-Specific Tests

```yaml theme={null}
network:
  services:
    ssh:
      weak_algorithms: true
      default_credentials: true

    mysql:
      anonymous_access: true
      weak_passwords: true

    redis:
      no_auth: true
      dangerous_commands: true
```

## Output

```
Network Scan Results:

192.168.1.10
├── Port 22/tcp (SSH)
│   ├── OpenSSH 7.9
│   └── ⚠️ Weak key exchange algorithms
├── Port 80/tcp (HTTP)
│   ├── nginx 1.18.0
│   └── ✅ No issues
└── Port 3306/tcp (MySQL)
    ├── MySQL 5.7.32
    └── ❌ Remote root login enabled
```

## Internal Network Testing

For internal network scans, deploy the AIPTx agent:

```bash theme={null}
docker run -d --network host aiptx/agent \
  --api-key ${AIPTX_API_KEY} \
  --targets 10.0.0.0/8
```