edu4rdshl/unimapScan only once by IP address and reduce scan times with Nmap for large amounts of data.
Scan only once by IP address and reduce scan times with Nmap for large amounts of data. Unimap is an abbreviation of "Unique Nmap Scan". The tool can run in Linux, OSX, Windows or Android (Termux) without problems.
If you have plans to run a Nmap to a whole organization you need to consider that surely tens, hundreds or even thousands of subdomains will point to the same IP address and there will come a point where it becomes almost impossible to continue scanning. Also your IP may end up blocked due to multiple scans to the same remote host address among other things.
Unimap uses its own technology to initially resolve the IP addresses of all subdomains, once this process is finished, it creates a vector with the unique IP addresses and launches a parallel scan with Nmap according to the number of threads that the user has configured, at the same time, it analyzes the data from the files created with Nmap to find out which information corresponds to each IP. Finally, Unimap relates the information of each of the IPs associated with the subdomains. So, for example, if you have 50 subdomains that point to the same IP, you will only do one Nmap scan but you will have all the data associated with each of the subdomains at the same time, in a large scan it saves days or weeks.
You need to have Rust (1.88 or newer) and Nmap installed in your computer, then run:
1. git clone https://github.com/Edu4rdSHL/unimap.git && cd unimap
# Alternatively you can download a release from https://github.com/Edu4rdSHL/unimap/releases/latest
# extract it and continue to next step.
2. cargo build --release
# Now the binary is in ./target/release/unimap
# The next command only works on Linux and MacOS. Windows user need specify the target path in environment variable
3. cp ./target/release/unimap /usr/local/bin
# Now you can use the `unimap` command from everyewhere.
The image edu4rdshl/unimap is published for linux/amd64 and linux/arm64
on every release, under latest and the release version:
docker pull edu4rdshl/unimap:latest
docker run --rm edu4rdshl/unimap:latest -t hackerone.com --fast-scan
# Keep the CSV and the Nmap XML files: mount a directory on /opt/unimap
docker run --rm -v "$(pwd):/opt/unimap" edu4rdshl/unimap:latest -f targets.txt --fast-scan -u results.csv
See docker/README.md to build the image yourself.
Download the latest version for your OS and use it.
unimap can be installed from available AUR packages using a AUR helper. For example,
$ paru -S unimap
If you prefer, you can clone the AUR packages and then compile them with makepkg. For example,
git clone https://aur.archlinux.org/unimap.git && cd unimap && makepkg -si
Unimap requires root/administrator privileges to launch Nmap TCP SYN (Stealth) Scan, we use it for accuracy and performance reasons. If you are on Linux or Linux-based, just use a root shell or run the tool with sudo, in Windows you can open a Command Prompt (CMD) as Administrator and run the tool as usual.
unimap -f targets.txt -u log.csv performs a full scan and writes output to log.csv.unimap -f targets.txt --fast-scan -o performs a fast scan and saves the logfile to the logs/ folder.sudo unimap -f targets.txt --ports "1-1000" --min-rate 5000 scans ports from 1-1000 doing service and version detection (if you want a fast scan use the --fast-scan flag) with a min-rate of 5000.--threads and --min-rate (being it the most important).Run the unit and integration tests (no network, root or Nmap needed):
cargo test
Run a short end-to-end check that builds the Docker image and launches real scans
against scanme.nmap.org (needs Docker and internet access):
scripts/container-test.sh
Open an issue.