Sherlock Forensics Port Scanner

What Sherlock Forensics Port Scanner is

Sherlock Forensics Port Scanner is a free desktop GUI tool for identifying exposed TCP ports and the services using them. It scans the top 1,000 TCP ports by default, accepts custom port and CIDR ranges, and can scan all 65,535 TCP ports. For open ports, it retrieves service banners that can identify software and version strings. The tool is intended for penetration testers, compliance auditors, and system administrators mapping a host’s attack surface. Scans use TCP connect with the full three-way handshake; SYN scanning is not supported. Results export to CSV with timestamps, target host, port, protocol, state, and service identification. Each export also has an Ed25519-signed sidecar containing the CSV’s SHA-256, signature, per-installation public key, and UTC timestamp. It identifies ports and services but does not compare findings with CVE databases or attempt exploitation. Windows version 0.1.7 supports 64-bit Windows 10/11 as a single executable without installation dependencies or elevated privileges. A native Linux x64 binary requires libgtk-3, libfontconfig1, and libxkbcommon. The free plan has no trial period, feature restrictions, or expiry.