phpNMAP is a Webased front end for nmap, the worlds best network mapper/scanner. phpNMAP was written with security in mind. It allows you to scan from any platform with a web browser and access to a server hosting phpNMAP.

N.E.W.T. scans all remote networked machines on single or all domains and attempts to retrieve a wealth of detailed information. It shows this data in a spreadsheet-like format for a concise, overall view of your network.

K9 is a Windows tool for passive OS detection. It uses WinPCAP to capture network traffic and a user friendly interface to handle results, fingerprint database, etc.

Toolkit that includes: Scanners: Comprehensive Security Scanner, Port scanner (TCP and UDP ports), IP scanner, NetBIOS scanner, Share Scanner. Security scanner provides the following information: NetBIOS names, Configuration info, Missing Security Patchs, Installed Service Packs, open TCP and UDP ports, Transports, Shares, Users, Groups, SNMP, Services, Drivers, Local Drives, Sessions, Remote Time of Date, Printers. Monitors: Host and Port Monitor. System Information: System Info Viewer, Advanced Process Viewer, Network Resources Viewer. Network utilities: DNS list host, DNS lookup name, Network Time Synchronizer, Ping, Traceroute, Whois, and Finger.

Winfingerprint is a Win32 MFC VC++ .NET based security tool that is able to Determine OS, enumerate users, groups, shares, SIDs, transports, sessions, services, service pack and hotfix level, date and time, disks, and open TCP and UDP ports.

Knocker is a simple and easy to use TCP security port scanner written in C to analyze hosts and all of the different services started on them.

NetBios Scan is a tool that scan ip ranges and searchs host with share resources. With this program you can get information like machine name, workgroup,the user list, share resources... and you can connect and disconnect to these resources!

Oracle version fingerprinter.

SAT is a simple and fast network scanner written in Python. It is used to identify network devices and services: The identification is based on recieved data such as banners.

Angry IP scanner is a very fast IP scanner for Windows. It can scan IPs in any range. Its binary is very small compared to other ip scanners.

Amap is a next-generation scanning tool, which identifies applications and services even if they are not listening on the default port by creating a bogus-communication and analyzing the responses.

The famous port scanner in its 4th version, now with more useful stuff like host&service discovery and windows enumeration.

NScan is one of the most fast and flexible portscanners for Windows. It is specially designed for scanning large networks and gathering related network/host information.
It supports remote monitoring, usage of host and port lists, option profiles, speed and accuracy tuning, etc.
It also contains a traceroute, dig and whois, which work together with scanner.

httprint is a web server fingerprinting tool. It relies on web server characteristics to accurately identify web servers, despite the fact that they may have been obfuscated by changing the server banner strings, or by plug-ins such as mod_security or servermask. httprint can also be used to detect web enabled devices which do not have a server banner string, such as wireless access points, routers, switches, cable modems, etc.

Amap is a next-generation scanning tool for pentesters. It attempts to identify applications even if they are running on a different port than normal.
It also identifies non-ascii based applications. This is achieved by
sending trigger packets, and looking up the responses in a list of
response strings.

Remote Nmap (Rnmap) package contains both client and server programs. Actual idea for this sofware is that various Rnmap clients can connect to one centralized Rnmap server and do their portscannings. Server utilize Nmap scanner.

httprint is a web server fingerprinting tool. It relies on web server characteristics to accurately identify web servers, despite the fact that they may have been obfuscated by changing the server banner strings, or by plug-ins such as mod_security or servermask. httprint can also be used to detect web enabled devices which do not have a server banner string, such as wireless access points, routers, switches, cable modems, etc.

The httprecon project is doing some research in the field of web server fingerprinting, also known as http fingerprinting. The goal is the highly accurate identification of given httpd implementations. This is very important within professional vulnerability analysis.