Nmap
CLIClassic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test.
Nmap 
Nmap is released under a custom license, which is based on (but not compatible with) GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for full details.
The latest version of this software as well as binary installers for Windows, macOS, and Linux (RPM) are available from Nmap.org
Full documentation is also available on the Nmap.org website.
Questions and suggestions may be sent to the Nmap-dev mailing list.
Installing
Ideally, you should be able to just type:
./configure
make
make install
For far more in-depth compilation, installation, and removal notes, read the Nmap Install Guide on Nmap.org.
Using Nmap
Nmap has a lot of features, but getting started is as easy as running nmap scanme.nmap.org. Running nmap without any parameters will give a helpful
list of the most common options, which are discussed in depth in the man
page. Users who prefer a graphical interface
can use the included Zenmap front-end.
Contributing
Information about filing bug reports and contributing to the Nmap project can be found in the HACKING and CONTRIBUTING.md files.
관련 리소스
Nuclei
CLIFast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.
projectdiscovery/nuclei32.1k
HexStrike AI
MCPWraps 150+ security tools such as nmap, sqlmap and nuclei for agents to orchestrate, covering network recon, web pentesting, binary analysis and CTFs. Clone the repo, install the tools yourself and start the local server. For authorized testing only.
0x4m4/hexstrike-ai12.9k
MCP Kali Server
MCPTwo parts: an API server on Kali Linux and an MCP bridge, letting agents run nmap, sqlmap, Metasploit, Hydra and other tools, or arbitrary terminal commands, for authorized penetration testing and CTFs. Available in Kali's official repositories.
Wh0am123/MCP-Kali-Server848
garak
CLINVIDIA's open-source LLM vulnerability scanner that probes for prompt injection, jailbreaks, data leakage, hallucination and harmful content, supporting OpenAI, Hugging Face, Bedrock and most REST-accessible models. Scanning cloud models needs their API keys.
NVIDIA/garak9.6k
Trivy
CLIAll-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.
aquasecurity/trivy38.5k
Grype
CLIScans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.
anchore/grype13k