SpooNMAP has evolved from a simple wrapper for masscan and Nmap into a comprehensive findings engine. The latest update introduces context-aware NSE script scanning, allowing the tool to automatically generate severity-sorted reports in Markdown, JSON, and text formats. It includes fifteen custom NSE scripts for identifying vulnerabilities like RAKP hash capture, DameWare detection, and LDAP signing issues, significantly streamlining the transition from port discovery to actionable reporting.
Beyond traditional services, the tool now features specialized detection for exposed Local LLMs, including Ollama and OpenAI-compatible endpoints, as well as container and debugger APIs. Performance has been optimized with a reworked host discovery process that combines ICMP sweeps with masscan to avoid firewall state table saturation. Quality-of-life improvements such as scan resumption, automatic rate calibration, and Metasploit-compatible outputs make it a robust addition to any penetration tester's toolkit.
