SuperScan

SuperScan is a proxy application that lets you scan for proxy servers.

If you want to download SuperScan, you can do so here:
http://www.proxysecurity.com/tools/superscan.zip

Below, is a detailed description on how to use this proxy application.

Configuring

Everybody has it's own setup, to work best for themselves. I will show you how i configure SuperScan, and as it works for me, it should for you, too.

Scan Options
In scan options, you can see a slider bar, which lets you set the speed of outgoing packets while SuperScan is scanning. You should set it depending on your internet connection, but for an average user, the default value is ok. You can leave the host discovery and service discovery passes as they are set by default aswell. The "hostname lookups" checkbox have to be checked, if you want to see hostnames of the scanned proxies, but that's also optional. Under the banner grabbing, you can set two timeouts. One for a TCP connection, and another for an UDP. It is the time SuperScan will wait for a reply from a proxy server. You can also leave this as it is by default, if you don't know which time is best for you. Leave the "Source IP (for SYN scan)" to default, and check both checkboxes below.

Host And Service Discovery
If you don't know which timeout times should you choose, you can leave all of them as they are by default. Check the "host discovery" checkbox and choose any combination of the four types on the right. These are the tasks SuperScan performs to decide if it is going to scan further on the current IP address or if it's dead. Again, if you don't know which ones are best, you can leave them as by default. Below you have two types of port scans, UDP and TCP. I, personally, don't use the UDP scan method. But if you want to, all you have to do is add ports you want SuperScan to test. You can do so by typing in a desired port in the "start port" text box and press the button on the right of it. Once you do that, SuperScan should add that port to the list at the bottom. Same thing goes for the TCP scan method, except there are two sub-types of scanning. You can choose between a SYN and a Connect scan. What that means is, a SYN doesn't open a complete connection to the remote host, but instead just sends a SYN packet. If the host responds to the SYN packet, SuperScan knows we are able to connect to that port, and closes the connection, while the Connect type does a complete 3-way handshake connection. Note that not every system is able to make SYN connections, so if you don't know if your operating system supports it, choose the Connect method.

Connect Options
The "This ip address" text box should always show your computer's IP address. This is the IP address that is compared to the proxy output, and if they don't match, the proxy is anonymous. This is an important part, because having a wrong IP there, every proxy will result as anonymous. Luckily, charon does the job for you, so you don't have to write your IP address there manually. The proxy judge part depends on you. Either setup an internal proxy judge, or use a public one. I use external judges, which you can find on our website. Thread control depends on your computer and internet connection. Threads, means how many proxies at once does charon check, timeout means how long should charon wait for a proxy server to reply, and the retry part is the number of retries charon does when it finds a dead proxy. I have a setup of 30 threads, 15 timeout and 1 retry/dead. In the http proxies, i have checked all the three check boxes. To check the scanned proxies for http protocol support, connect support, and to resolve proxies IP address to it's hostname, to get an idea about what kind of proxy it is, and what is it's location. Under Common, i don't check any of the checkboxes, because i don't need more data. If you want to know the country where the proxy is from and get to the end of gateways, check the checkboxes. Socks proxies also depends on which proxy servers you are hunting for. If you are looking for Socks4 and/or Socks5, these are the checkboxes you should check. You can leave the "check against" to the microsoft site, as it is set by default.

Scanning

The last part is scanning. There are three methods to add IP addresses in SuperScan. One method is by entering the IP address or hostname in the "hostname/ip" text box, and pressing the button next to it. It is usually used for scanning specific IP address. Second method is by setting a start ip and, end ip, and pressing the button next to it. This method is used for scanning large ranges of IP addresses. And the third, and last method of adding IP addresses is by importing them from a file. SuperScan detectcs IP addresses in text files and adds them to the list. SuperScan also offers a HTML method of viewing the results of the current scan. You can see it by pressing the button "view html results" at the bottom.