// the find
trimstray/sandmap
Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
sandmap is a Bash wrapper around Nmap that organizes 459 predefined scan profiles into 31 named modules (SSL checks, SMB vulns, HTTP, databases, etc.) with a menu-driven CLI. It's aimed at pentesters and sysadmins who know what they want to scan but don't want to reconstruct Nmap flag combinations from memory every time.
The module library is genuinely useful — having named profiles for things like nse_smb-vuln or nse_ssl means you can run a focused scan without consulting Nmap docs. TOR/proxychains integration is built in rather than bolted on. The template system for custom modules is straightforward enough that extending it doesn't require reading much code. Packaging as a proper setup.sh install with a man page and shell completion is more polished than most shell tools of this type.
Last meaningful activity was years ago; the Travis CI badge links to a dead service and the project feels abandoned rather than stable. It's Linux-only and requires root, which limits where you can actually run it. Being a Bash wrapper means the error handling is whatever Nmap prints to stdout — there's no structured output or exit code discipline. The 459 scan profiles sound impressive but most users will use five of them, and there's no obvious way to discover which profiles are actually worth running without going through the wiki.