zmap/zmap
Zmap
ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
Features
- Internet-Wide Port Scanners - Scans every public IPv4 address on a specified port in under 45 minutes using a single stateless packet.
- Internet-Wide Scanning - Performs fast, stateless scans across the entire public IPv4 address space to discover hosts and services.
- Token Bucket Throttlers - Ships a token bucket rate controller that throttles packet transmission to prevent network congestion during scans.
- IPv4 Address Space Scanners - Performs fast, stateless TCP SYN scans across the entire public IPv4 address range or specified subnets on a single port.
- Single Packet Scanners - Sends exactly one probe per target host to achieve high-speed, low-overhead Internet-wide scanning.
- Custom Probe Packet Senders - Sends TCP SYN, ICMP, DNS, UPnP, BACNET, or UDP probes to target hosts during a scan.
- Full IPv4 Range Scanners - Maps the entire public IPv4 range by sending probes to specified ports and collecting responses.
- Raw - Sends and receives network packets directly through raw sockets, bypassing the OS TCP stack for maximum throughput.
- Stateless Network Probes - Generates and sends individual probe packets without maintaining connection state for high-speed scanning.
- SYN Probes - Performs fast, stateless TCP SYN scans by sending SYN packets without completing the handshake.
- IP Address Blocklists - Loads a blocklist of excluded IP ranges before scanning to skip reserved or unwanted targets.
- Pseudorandom Permutation Generators - Produces a pseudorandom permutation of the target IP range using cryptographic counter mode for uniform coverage.
- Network Reconnaissance - Conducts responsible, opt-out-aware internet surveys for security research and network topology analysis.
- Configurable Output Pipelines - Processes scan results through a configurable chain of field selection, filtering, and formatting stages.
- JSON Output Formats - Outputs selected probe fields to a JSON-formatted file for direct consumption by programs.
- CSV Output Formats - Outputs selected probe fields to a comma-separated value file for easy import into analysis tools.
- Structured Scan Result Outputs - Writes responding IP addresses to files in plain text, CSV, or JSON with optional additional fields.
- Scan Result Exporters - Writes scan outputs to CSV, JSON, or plain text with SQL-like filtering for integration into analysis pipelines.
- Port Discovery and Filtering - Probes multiple ports or port ranges across broad IP ranges to identify open services and network assets.
- Port Range and Top List Filters - Probes a list of specific ports or contiguous port ranges in a single scan run.
- Modular Probe Interfaces - Encapsulates different probe types behind a common interface for modular addition of new scan protocols.
- Output Field Filters - Filters scan results using SQL-like expressions on output fields before writing them to file.
- Real Time Process Monitors - Displays live status updates showing completion percentage, send/receive rates, and hit rate during scans.
- Bandwidth and Target Limiters - Restricts bandwidth consumption and the number of addresses probed to avoid overwhelming the network.
- Terminal Status Displays - Updates a terminal-based progress indicator with live statistics on completion, rates, and hit ratio during scans.
- Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
- Network Discovery - High-speed network scanner for large-scale IPv4 address space analysis.
- Network Scanning - Fast network scanner optimized for internet-wide surveys.
- Network Security - Fast network scanner for Internet-wide surveys.
