Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/s0md3v/smap
a drop-in replacement for Nmap powered by shodan.io
https://github.com/s0md3v/smap
network-scanner network-security nmap nmap-alternative port-scanner port-scanning scanner scanning
Last synced: 19 days ago
JSON representation
a drop-in replacement for Nmap powered by shodan.io
- Host: GitHub
- URL: https://github.com/s0md3v/smap
- Owner: s0md3v
- License: agpl-3.0
- Created: 2022-03-19T07:48:21.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-04-03T18:09:35.000Z (7 months ago)
- Last Synced: 2024-05-02T01:09:19.912Z (6 months ago)
- Topics: network-scanner, network-security, nmap, nmap-alternative, port-scanner, port-scanning, scanner, scanning
- Language: Go
- Homepage:
- Size: 395 KB
- Stars: 2,729
- Watchers: 30
- Forks: 234
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- WebHackersWeapons - Smap - in replacement for Nmap powered by shodan.io||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Go.md)| (Weapons / Tools)
README
passive Nmap like scanner built with shodan.io
---
Smap is a port scanner built with shodan.io's free API. It takes same command line arguments as Nmap and produces the same output which makes it a drop-in replacament for Nmap.
## Features
- Scans 200 hosts per second
- Doesn't require any account/api key
- Vulnerability detection
- Supports all nmap's output formats
- Service and version fingerprinting
- Makes no contact to the targets
## Installation
### Binaries
You can download a pre-built binary from [here](https://github.com/s0md3v/Smap/releases) and use it right away.
### Manual
`go install -v github.com/s0md3v/smap/cmd/smap@latest`
Confused or something not working? For more detailed instructions, [click here](https://github.com/s0md3v/Smap/wiki/FAQ#how-do-i-install-smap)
### AUR pacakge
Smap is available on AUR as [smap-git](https://aur.archlinux.org/packages/smap-git) (builds from source) and [smap-bin](https://aur.archlinux.org/packages/smap-bin) (pre-built binary).
### Homebrew/Mac
Smap is also avaible on [Homebrew](https://formulae.brew.sh/formula/smap).
```
brew update
brew install smap
```
## Usage
Smap takes the same arguments as Nmap but options other than `-p`, `-h`, `-o*`, `-iL` are ignored. If you are unfamiliar with Nmap, here's how to use Smap.
### Specifying targets
```
smap 127.0.0.1 127.0.0.2
```
You can also use a list of targets, seperated by newlines.
```
smap -iL targets.txt
```
**Supported formats**
```
1.1.1.1 // IPv4 address
example.com // hostname
178.23.56.0/8 // CIDR
```
### Output
Smap supports 6 output formats which can be used with the `-o* ` as follows
```
smap example.com -oX output.xml
```
If you want to print the output to terminal, use hyphen (`-`) as filename.
**Supported formats**
```
oX // nmap's xml format
oG // nmap's greppable format
oN // nmap's default format
oA // output in all 3 formats above at once
oP // IP:PORT pairs seperated by newlines
oS // custom smap format
oJ // json
```
> Note: Since Nmap doesn't scan/display vulnerabilities and tags, that data is not available in nmap's formats. Use `-oS` to view that info.
### Specifying ports
Smap scans these [1237 ports](https://gist.githubusercontent.com/s0md3v/3e953e8e15afebc1879a2245e74fc90f/raw/1e20288e9bef43b60f7306b6f7e23044dabd9b8c/shodan_ports.txt) by default. If you want to display results for certain ports, use the `-p` option.
```
smap -p21-30,80,443 -iL targets.txt
```
## Considerations
Since Smap simply fetches existent port data from shodan.io, it is super fast but there's more to it. You should use Smap if:
#### You want
- vulnerability detection
- a super fast port scanner
- results for most common ports (top 1237)
- no connections to be made to the targets
#### You are okay with
- not being able to scan IPv6 addresses
- results being up to 7 days old
- a few false negatives