Quicmap — QUIC/HTTP-3 scanner
Scans QUIC and HTTP/3 ports, validates protocol (QUIC vs HTTP/3), fingerprints services from HTTP/3 headers, grabs banners, and exports JSON.
← Store · // recon
Recon Toolkit
Four focused reconnaissance tools that do the parts generic scanners do badly: QUIC/HTTP-3 scanning, stealth path tracing, bulk host recon and SMTP/FTP sweeps.
from $299support & customisation
⚠ Authorized use onlyReconnaissance tooling for authorized engagements only — you must have permission to assess any target. Provided as-is, without warranty.
// what it is
What it is
The Recon Toolkit is four small, sharp tools rather than one bloated scanner. Each targets a gap in the usual toolchain — modern QUIC/HTTP-3 services, path tracing that survives filtering, bulk triage of large target lists, and quick mail/transfer sweeps.
// capabilities
Four tools
Stalkroute — stealth traceroute
Anti-detection path tracing: randomised probes to beat rate-limiters, source-IP spoofing, and rotation across ICMP/UDP/TCP-SYN, reporting filtered or blocked hops.
worldroute — bulk recon
Reads a list of IPs or domains and runs RouterSploit’s autopwn scanner across them, exporting results to CSV for analysis.
smfp — SMTP/FTP sweeps
A fast Rust scanner for sweeping SMTP and FTP services across a range.
// under the hood
Specifications
- Languages
- Rust + Python
- Quicmap
- github.com/s-b-repo/Quicmap
- Stalkroute
- github.com/s-b-repo/Stalkroute
- worldroute
- github.com/s-b-repo/worldroute
- smfp
- github.com/s-b-repo/smfp
- Intended use
- Authorized reconnaissance only
// what you pay for
Support, not a paywall
The tools are public. What you pay for is walkthroughs, extensions and adapting them to your estate.
- Installation & configuration help — stood up in your environment and tuned to your setup and rules of engagement.
- Bug fixes & improvements, prioritised for you — issues you hit move to the front of the queue.
- Customisation — new modules, integrations or behaviour built for your targets. You keep the source.
- A direct line to the engineer who wrote it — no support tier in between.
// the fine print
Terms & liability
Authorized use only. Published for legitimate reconnaissance, testing and research; you must have permission to assess any target.
No liability. Provided as-is and without warranty; Cyber Sec and Stephan Botes accept no liability for misuse.
What the fee buys. The engineer’s time — walkthroughs, extensions and adapting it to your estate.
Questions about scope, licensing or authorization? Get in touch first.