Run your first scan

curl https://qsa.sh

That is the whole setup. No account, no API key, no agent.

What happens, step by step#

1. We detect your IP. The scan target is the public IP your connection comes from. It is printed back to you before anything starts.
2. You get a 15 second abort window. Press Ctrl-C during that window and nothing is scanned. Continuing past it is your confirmation that you are authorized to scan the host.
3. Ports are discovered. naabu sweeps the top 1,000 TCP ports on the free tier.
4. Services are fingerprinted. nmap runs -sV --script vulners against every open port and matches known CVEs to detected versions.
5. Vulnerability checks run. nuclei runs roughly 2,000 curated high signal templates.
6. Results stream as they are found. You do not wait for a report at the end.

Use HTTPS#

curl qsa.sh connects over plain HTTP. Run the HTTPS form so the scan and its results are encrypted in transit:

curl https://qsa.sh

When the scan is refused#

A refusal is not a failure of the tool. It means the connecting IP is not a valid scan target:

• The IP is inside a known CGNAT or mobile carrier range, so it is not yours alone.
• The connection is IPv6. Scanning is IPv4 only.
• Our data flags the origin as a proxy, VPN or Tor exit.

Run the command from the server itself rather than from a laptop behind carrier NAT. See Troubleshooting.

Next#

• Reading your scan output
• Fixing what the scan finds
• Back to the index