Repository files navigation

sandmap is a tool supporting network and system reconnaissance using the massiveNmap engine. It provides a user-friendly interface, automates and speeds up scanning and allows you to easily use many advanced scanning techniques.

• simpleCLI with the ability to run pureNmap engine
• predefined scans included in themodules
• supportNmap Scripting Engine (NSE) with scripts arguments
• TOR support (with proxychains)
• multiple scans at one time
• at this point:31 modules with459 scan profiles

It's simple:

# Clone this repositorygit clone --recursive https://github.com/trimstray/sandmap# Go into the repositorycd sandmap# Install./setup.sh install# Run the appsandmap

• symlink tobin/sandmap is placed in/usr/local/bin
• man page is placed in/usr/local/man/man8

Before using thesandmap read theCommand Line introduction.

Theetc/main.cfg configuration file has the following structure:

# shellcheck shell=bash# Specifies the default destination.# Examples:#   - dest="127.0.0.1,8.8.8.8"dest="127.0.0.1"# Specifies the extended Nmap parameters.# Examples:#   - params="--script ssl-ccs-injection -p 443"params=""# Specifies the default output type and path.# Examples:#   - report="xml"report=""# Specifies the TOR connection.# Examples:#   - tor="true"tor=""# Specifies the terminal type.# Examples:#   - terminal="internal"terminal="internal"

sandmap uses external utilities to be installed before running:

• nmap
• xterm
• proxychains

This tool working with:

• GNU/Linux (testing on Debian and CentOS)
• Bash (testing on 4.4.19)
• Nmap (testing on 7.70)

Also you will needroot access.

Available modules:31Available scan profiles:459

If you want to create your own modules, take a lookthis.

Seethis.

Seethis.

GPLv3 :http://www.gnu.org/licenses/

Free software, Yeah!