Nmap 7.96 Launches: Lightning-Fast DNS, New Scripts, and Smarter Scanning
The network reconnaissance world just got a serious upgrade. The Nmap Project has rolled out version 7.96, introducing speed, intelligence, and usability refinements that sharpen its edge as a premier network discovery and security analysis tool.
⚡ Performance at Scale: Blazing-Fast DNS Resolution
Nmap now tackles DNS like never before. Thanks to parallel forward DNS lookups, scans involving vast hostlists are no longer a bottleneck. The new engine, built on the rock-solid reverse DNS system used for years, resolved a million domain names in just over an hour—a staggering leap from the old 49-hour slog.
Behind the scenes, a custom stub resolver handles DNS in-house, bypassing sluggish system libraries. And for pros who need fine-grained control, options like --dns-servers, --system-dns, -R, and -n give you total command over resolution strategy.
🛠 Under the Hood: Smarter Libraries, Cleaner Code
Nmap 7.96 upgrades several core components, packing enhanced performance and broader system compatibility:
- OpenSSL 3.0.16 – Stronger cryptographic support
- Lua 5.4.7 – More efficient scripting
- libpcap 1.10.5, libssh2 1.11.1, and libpcre2 10.45 – Modernized libraries for packet handling, SSH, and pattern matching
These changes ensure Nmap runs lean and mean across today’s diverse operating environments.
🧠 New Scripting Intelligence: Targeted and Tactical
With three powerful new NSE scripts, version 7.96 sharpens its ability to interact with and assess real-world systems:
mikrotik-routeros-version: Extracts RouterOS version info via WinBoxmikrotik-routeros-username-brute: Launches brute-force logins using CVE-2024-54772targets-ipv6-eui64: Generates IPv6 addresses from MACs via EUI-64
The NSE library now totals 612 scripts, offering unmatched versatility in automated security testing.
🖥 Windows Users, Rejoice: Npcap 1.82 & Dark Mode
On Windows, this release includes Npcap 1.82, a leap forward in packet capture. It supports:
- High-speed packet injection
- VLAN header recognition
- SR-IOV hardware compatibility
Bugs around packet sizing and VLAN tagging? Gone.
Zenmap, Nmap’s GUI, also got a sleek visual refresh—dark mode is here, reducing eye fatigue for late-night assessments. Toggle it via the “Profile” menu or set it in zenmap.conf.
🧪 Core Improvements & Fixes: More Precision, Less Noise
Nmap 7.96 fixes several quirks that affected scan accuracy:
- TCP Connect (
-sT) now properly distinguishes between “closed” and “filtered” states - Support added for IP protocol 255
- Simultaneous input from both
-iLand CLI targets now works as expected
Ncat, Nmap’s data transfer utility, now mimics traditional netcat behavior more closely with a new -q delay-exit option—ideal for scripting and automated workflows.
🔗 Get It Now
Nmap 7.96 is available for download at nmap.org/download in a full range of builds, from Windows installers and Linux packages to macOS binaries and source code.
Whether you’re mapping enterprise networks, auditing cloud exposure, or red-teaming your own defenses, this release makes your toolkit faster, smarter, and more adaptable than ever.
