███╗   ██╗███╗   ███╗ █████╗ ██████╗ ██████╗ ██████╗ ██╗    ██╗███╗   ██╗
 ████╗  ██║████╗ ████║██╔══██╗██╔══██╗╚════██╗██╔══██╗██║    ██║████╗  ██║
 ██╔██╗ ██║██╔████╔██║███████║██████╔╝ █████╔╝██████╔╝██║ █╗ ██║██╔██╗ ██║
 ██║╚██╗██║██║╚██╔╝██║██╔══██║██╔═══╝ ██╔═══╝ ██╔═══╝ ██║███╗██║██║╚██╗██║
 ██║ ╚████║██║ ╚═╝ ██║██║  ██║██║     ███████╗██║     ╚███╔███╔╝██║ ╚████║
 ╚═╝  ╚═══╝╚═╝     ╚═╝╚═╝  ╚═╝╚═╝     ╚══════╝╚═╝      ╚══╝╚══╝ ╚═╝  ╚═══╝
                    Paste. Parse. Pwn.

The pentester's command generator. Paste Nmap output, get ready-to-run attack commands.

Nmap2Pwn is a zero-database, offline-ready web application that transforms raw Nmap scan output into copy-pasteable pentesting commands — with your target IP, credentials, and hashes already embedded. Think of it as GTFOBins meets HackTricks, purpose-built for Active Directory and CTF environments.

Paste your scan. Fill in your creds. Copy the command. Pwn the box.

• Nmap Parser Mode — Paste raw Nmap output and instantly get commands tailored to every detected open port
• Manual Browse Mode — Explore all 14 supported ports and 65+ tools without running a scan first
• Real-Time Global Variables — Set IP, USERNAME, PASSWORD, DOMAIN, HASH, and WORDLIST once in the top panel; every command updates live across the entire UI
• 407+ Ready-to-Run Commands — Exhaustive coverage of Impacket, NetExec, evil-winrm, BloodHound, Kerbrute, gobuster, and dozens more
• One-Click Copy — Every command has a copy button with instant visual feedback
• Expandable Descriptions — Click any command to learn why you'd run it
• Zero Database — All command data lives in modular JSON files; no setup, no migrations
• Extensible — Add new ports or tools by dropping a JSON file into a folder

• Go 1.22+
• Node.js 18+

git clone https://github.com/furkanalp41/nmap2pwn.git
cd nmap2pwn

cd backend
go mod tidy
go run ./cmd/server/

The API server starts on http://localhost:8080. To use a different port:

NMAP2PWN_ADDR=":3333" go run ./cmd/server/

cd frontend
npm install
npm run dev

The UI opens at http://localhost:5173 with API requests proxied to the backend.

Note: If your backend runs on a non-default port, update the proxy target in frontend/vite.config.ts.

Nmap2Pwn's knowledge base is entirely file-driven. To add commands for a new port or tool:

1. Create a JSON file in backend/data/ports/:

{
  "port": 8080,
  "protocol": "tcp",
  "service": "HTTP-Proxy",
  "description": "Your service description here.",
  "tools": [
    {
      "name": "Your Tool Name",
      "description": "What this tool does.",
      "commands": [
        {
          "title": "Command title",
          "command": "your-tool --target {{IP}} -u {{USERNAME}}",
          "description": "When and why to use this command."
        }
      ]
    }
  ]
}

2. Restart the backend. That's it. The new port and commands appear instantly in the UI.

All placeholders can be set globally via the Variables panel in the UI.

nmap2pwn/
├── backend/
│   ├── cmd/server/main.go        # Entry point
│   ├── internal/
│   │   ├── parser/nmap.go        # Nmap output parser (regex)
│   │   ├── handler/              # HTTP handlers (parse, ports, health)
│   │   ├── store/loader.go       # JSON file loader + in-memory cache
│   │   ├── model/                # Data structs
│   │   └── router/router.go     # Gin routes + CORS
│   └── data/ports/               # 14 JSON command databases
│
├── frontend/
│   └── src/
│       ├── context/              # Global Variables (React Context)
│       ├── components/           # CommandCard, NmapInput, Layout, etc.
│       ├── pages/                # Home (Parse), BrowsePorts, PortDetail
│       ├── services/api.ts       # Backend API client
│       └── hooks/                # useClipboard
│
└── README.md

Contributions are welcome! The easiest way to contribute is to add commands:

1. Fork the repository
2. Add or expand a JSON file in backend/data/ports/
3. Validate your JSON: python3 -m json.tool your_file.json
4. Submit a pull request

For code contributions, please open an issue first to discuss the change.

This tool is provided for educational purposes and authorized security testing only.

Nmap2Pwn is designed to assist cybersecurity professionals, penetration testers, and CTF players who have explicit written authorization to test the target systems. Unauthorized access to computer systems is illegal.

The authors assume no liability and are not responsible for any misuse or damage caused by this tool. By using Nmap2Pwn, you agree that you are solely responsible for your actions and that you will comply with all applicable local, state, national, and international laws.

Always obtain proper authorization before testing any system you do not own.

This project is licensed under the MIT License.

_{Built for the offensive security community. Star the repo if it saves you time.}