Nmap 7.96 Released with Enhanced Scanning Capabilities and Updated Libraries

The popular network mapping and security auditing tool Nmap has released version 7.96, featuring a host of significant improvements.

This latest version introduces parallel forward DNS resolution for dramatically faster hostname scanning, upgraded core libraries, new scripting capabilities, and enhanced compatibility across platforms, especially for Windows users.

One of the headline features in Nmap 7.96 is a completely revamped system for forward DNS lookups.

Building on its reliable reverse DNS engine, Nmap now performs parallel resolutions of hostnames, slashing the time needed to scan large lists.

Developer Daniel Miller reports that in benchmark tests, scanning 1 million hostnames now takes just over an hour-compared to the 49 hours required by previous versions.

This improvement delivers not only speed but also visible progress stats and responsiveness, eliminating previous bottlenecks.

Updated Libraries and Enhanced Windows Support

Nmap 7.96 modernizes its software backbone, including:

• OpenSSL 3.0.16
• Lua 5.4.7
• libssh2 1.11.1
• libpcap 1.10.5
• libpcre2 10.45

For Windows, the bundled Npcap network driver gets a significant update from version 1.79 to 1.82.

This brings faster packet injection, VLAN header capture, and support for the latest hardware adapters, vastly improving performance and compatibility. Numerous bug fixes and feature enhancements are detailed on the Npcap changelog.

Expanded Scripting and Detection

The Nmap Scripting Engine (NSE) grows to 612 scripts, with new highlights including:

• Mikrotik RouterOS Version Detection: Probing WinBox services for version info.
• Mikrotik Username Brute-forcing: Exploiting CVE-2024-54772 for enhanced auditing.
• Target Generation from MAC Addresses: Automatically generating IPv6 EUI-64 targets.

Additionally, detection and enumeration of redis services with TLS, improvements to SSH scripting, and support for IP protocol 255 scanning reflect Nmap’s commitment to comprehensive coverage.

Nmap’s GUI front-end, Zenmap, introduces a dark mode and resolves several crash and Unicode issues, especially aiding macOS users.

The Nping utility aligns its versioning with Nmap and receives important bug fixes for raw socket binding.

This release squashes numerous bugs, from installer issues to memory performance, and clarifies target selection behavior when using input files versus command line.

Ncat, Nmap’s flexible data transfer tool, now better aligns with traditional netcat implementations and offers improved connection handling.

Nmap 7.96 represents a major step forward for network administrators, security professionals, and enthusiasts, delivering performance, reliability, and new tools for today’s complex environments.

The release underscores Nmap’s status as an essential tool for network discovery and security auditing.

Setting Up SOC Team? – Download Free Ultimate SIEM Pricing Guide (PDF) For Your SOC Team -> Free Download