Scan the network. Find the device. Get to work.
EXP IP Scanner is a free Windows network scanner built by EXP Technical for consultants who need answers quickly. It detects the active subnet, finds devices as the scan runs, identifies vendors and common services, and adds focused passive PHP2Shell vulnerability checks.
Built for the work
No dashboards to learn and no inventory system to maintain. Open it, scan, identify the device, and move on with the job. When you are waiting on a reboot or chasing an intermittent device, Watch Mode repeats the scan and highlights what appeared, changed, or went offline.
Starts with the active subnet already selected, and puts the adapter, your local IP, the default gateway, the scan range and your public IP address on one line above the results. Copy the whole network summary in one click, or copy an individual address directly.
Uses more than ping alone, combining ICMP, TCP, and ARP to find the kinds of devices consultants actually run into.
See hostname, MAC address, manufacturer, latency, and common services without opening another tool. Run a passive PHP security check across discovered web services when you need it.
When a device exposes RDP, SMB, SSH, VNC, or web management, the matching action is ready from the result.
An EXP Technical tool
EXP Technical built EXP IP Scanner as a focused field utility for consultants who need fast answers on unfamiliar networks. It gives you the network context and device details you need right now, plus a targeted PHP vulnerability check without turning a quick scan into a heavyweight vulnerability platform.
Focused vulnerability scanning
The Security pass inspects discovered web services and website URLs with read-only HTTP/HTTPS requests. It looks for PHP version evidence and checks known PHP2Shell affected versions when the patch level is visible, while keeping hidden versions in manual-review territory instead of guessing.
See it in action
Download
Portable is the easiest option for field work. The installer is there for a workstation you use every day.
Best for field work and shared consultant toolkits. Extract it, run it, and keep moving.
Best for a workstation where you want the scanner installed and ready every day.
Both editions use Microsoft Edge WebView2 Runtime. The current build is not code-signed, so Windows SmartScreen may show an unknown-publisher warning the first time.
Deployment options
| Portable | Installer | |
|---|---|---|
| Installation | None, extract and run | Windows installer |
| Administrator rights | Not needed | Needed to install |
| Scanning | Identical | Identical |
| Updates | Download the next ZIP | Checks quietly at launch and when you ask |
| Start Menu entry | No | Yes |
| Scan data kept on disk | None | None |
Questions
No. Scans run on your computer. Results are not uploaded, and there is no account, telemetry, or analytics.
It asks a plain-text lookup service what address you appear as. Like any HTTPS request, that service sees your public address, but the app sends no identifier, scan results, or discovered-device data. You can turn the lookup off in Settings. See the privacy notice.
No for normal scanning. The portable edition can be extracted and run without installation or elevation.
It includes a focused passive vulnerability check, not a broad vulnerability suite. The current Security pass checks selected PHP2Shell exposure using read-only web requests. It does not test passwords, send exploit payloads, or make destructive changes.
Because this is a field scanner, not an inventory system. One environment’s device list should not follow you into the next job.
Ready when you are
EXP IP Scanner is free, local-first, and built for everyday consultant work.