This repository hosts a professional Python-based automation script designed for the Network Scanning and Information Gathering phase of a penetration test. The tool streamlines complex nmap commands, focusing on firewall bypass techniques and stealth scanning.
Description: The nmap_stealth.py script is a menu-driven automation tool that allows security researchers to execute various advanced scanning techniques—from TCP SYN and XMAS scans to highly anonymous Idle/Zombie scans. It automates evasion flags such as packet fragmentation, MTU manipulation, and decoy addresses to simulate real-world attack scenarios and test network resilience.
- TCP SYN Stealth Scanning: High-speed discovery using half-open connections to minimize detection.
- Service Version Detection: Real-time identification of running services (e.g., FTP, SSH, HTTP) with verbose output.
- Firewall & IDS Evasion:
- XMAS Tree Scans to probe stateless firewalls.
- Packet Fragmentation & MTU 16 to bypass Deep Packet Inspection (DPI).
- Decoy Scanning to mask the real origin of the scan among multiple IPs.
- Total Anonymity (Idle Scan): Advanced probing via a silent "Zombie" host for complete source IP protection.
- Ensure Nmap and Python 3 are installed on your Linux environment.
- Run the script with root privileges:
sudo python3 nmap_stealth.py
Enter the Target IP and select your desired evasion technique from the menu.
