stefanosmarinos/mapg

MAPG is a command line script, written in Bash, that automates the early information gathering step of a penetration test or a Capture The Flag challenge. Instead of a tester manually running one scanning tool after another against a target, MAPG figures out which network services are running and runs the matching tools for you, then collects everything into one organized set of report files. You point it at a target IP address and choose a scan mode. The basic mode runs a quicker set of checks, including service detection, common scripted scans, web fingerprinting with WhatWeb, directory guessing with Gobuster, and an SSH configuration audit. The full mode adds a complete port scan, operating system and version detection, and deeper web and network checks using tools called Nuclei, Nikto, and enum4linux-ng, on top of everything basic mode already covers. MAPG currently understands several common service types out of the box: web servers over HTTP and HTTPS, SSH, FTP, SMB file sharing, and DNS, each mapped to the specific tool best suited to check it. Every scan writes its results into a timestamped folder, with separate files for each tool's output plus a summary file, so results from different targets or different runs stay organized and easy to compare later. To use it, you clone the repository and run the script with sudo, since some of the underlying scans need elevated permissions. It depends on several other tools being installed already, including Nmap, Gobuster, WhatWeb, and ssh-audit for basic mode, plus Nikto, Nuclei, and enum4linux-ng for full mode. The author lists planned future additions such as UDP scanning, SSL and TLS analysis, screenshot capture of web pages, and Docker support, but these are not built yet. The README states clearly that this tool is meant only for educational use, CTF competitions, and security assessments you are authorized to perform, and warns against using it on any system without explicit permission.