Completes full TCP handshakes to detect open ports, working without root because it uses normal system calls. This is the reliable fallback when nmap -sS is unavailable or blocked. It shows up in target logs as ordinary connection attempts.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.