s0md3v/Smap

Health v2 · maintenance only

Adoption not part of the score

3287 stars · 320 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Smap is a passive port scanner powered by Shodan.io's free API that serves as a drop-in replacement for Nmap, accepting the same command-line arguments and output formats. It performs service and version fingerprinting and vulnerability detection without making direct contact with targets in passive mode.

Use cases

• scan hosts for open ports without touching the target network
• replace nmap in scripts since it takes the same arguments and output formats
• fingerprint services and versions on remote hosts quickly
• detect known vulnerabilities on scanned hosts
• scan 200 hosts per second for large target lists
• accelerate real nmap scans using Shodan-reported ports

When to choose

• you need fast passive port discovery without an API key or account
• you want nmap-compatible CLI and output formats (xml, greppable, )
• stealth matters and you cannot make contact with the targets
• you want to narrow a full nmap scan to ports Shodan already knows about

When to avoid

• you need active, exhaustive port scanning of all 65535 ports on a live network
• you need LAN/internal network scanning where Shodan has no data
• you need deep NSE scripting or advanced nmap features in passive mode
• you require up-to-the-minute results for hosts not indexed by Shodan

Facets

cli-tool · maturity active

security networking cli security networking penetration-testing windows cli cross-platform port-scanner nmap-alternative shodan passive-scanning vulnerability-detection service-fingerprinting reconnaissance command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="s0md3v/Smap")