zmap/zmap

Features

• Internet-Wide Port Scanners - Scans every public IPv4 address on a specified port in under 45 minutes using a single stateless packet.
• Internet-Wide Scanning - Performs fast, stateless scans across the entire public IPv4 address space to discover hosts and services.
• Token Bucket Throttlers - Ships a token bucket rate controller that throttles packet transmission to prevent network congestion during scans.
• IPv4 Address Space Scanners - Performs fast, stateless TCP SYN scans across the entire public IPv4 address range or specified subnets on a single port.
• Single Packet Scanners - Sends exactly one probe per target host to achieve high-speed, low-overhead Internet-wide scanning.
• Custom Probe Packet Senders - Sends TCP SYN, ICMP, DNS, UPnP, BACNET, or UDP probes to target hosts during a scan.
• Full IPv4 Range Scanners - Maps the entire public IPv4 range by sending probes to specified ports and collecting responses.
• Raw - Sends and receives network packets directly through raw sockets, bypassing the OS TCP stack for maximum throughput.
• Stateless Network Probes - Generates and sends individual probe packets without maintaining connection state for high-speed scanning.
• SYN Probes - Performs fast, stateless TCP SYN scans by sending SYN packets without completing the handshake.
• IP Address Blocklists - Loads a blocklist of excluded IP ranges before scanning to skip reserved or unwanted targets.
• Pseudorandom Permutation Generators - Produces a pseudorandom permutation of the target IP range using cryptographic counter mode for uniform coverage.
• Network Reconnaissance - Conducts responsible, opt-out-aware internet surveys for security research and network topology analysis.
• Configurable Output Pipelines - Processes scan results through a configurable chain of field selection, filtering, and formatting stages.
• JSON Output Formats - Outputs selected probe fields to a JSON-formatted file for direct consumption by programs.
• CSV Output Formats - Outputs selected probe fields to a comma-separated value file for easy import into analysis tools.
• Structured Scan Result Outputs - Writes responding IP addresses to files in plain text, CSV, or JSON with optional additional fields.
• Scan Result Exporters - Writes scan outputs to CSV, JSON, or plain text with SQL-like filtering for integration into analysis pipelines.
• Port Discovery and Filtering - Probes multiple ports or port ranges across broad IP ranges to identify open services and network assets.
• Port Range and Top List Filters - Probes a list of specific ports or contiguous port ranges in a single scan run.
• Modular Probe Interfaces - Encapsulates different probe types behind a common interface for modular addition of new scan protocols.
• Output Field Filters - Filters scan results using SQL-like expressions on output fields before writing them to file.
• Real Time Process Monitors - Displays live status updates showing completion percentage, send/receive rates, and hit rate during scans.
• Bandwidth and Target Limiters - Restricts bandwidth consumption and the number of addresses probed to avoid overwhelming the network.
• Terminal Status Displays - Updates a terminal-based progress indicator with live statistics on completion, rates, and hit ratio during scans.
• Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
• Network Discovery - High-speed network scanner for large-scale IPv4 address space analysis.
• Network Scanning - Fast network scanner optimized for internet-wide surveys.
• Network Security - Fast network scanner for Internet-wide surveys.

Star history