Portspoof: Emulate a valid service on all 65535 TCP ports

Portspoof is a program designed to enhance OS security by keeping all 65535 TCP ports open. This prevents attackers from determining which ports are truly in use, as Portspoof generates fake banners for each port connection attempt. By adding complexity to the reconnaissance phase, it slows down attackers significantly. Additionally, Portspoof can be used offensively to exploit attackers’ tools and exploits. It is lightweight, fast, portable, and userland, requiring no root privileges. With more than 9000 dynamic service signatures, Portspoof is a powerful tool to deceive scanning software and make the attacker’s job difficult.

https://github.com/drk1wi/portspoof

To top