rmap.io

What It Is

rmap is a command-line toolkit focused on IPv6 network scanning and analysis. It is not a general-purpose web security scanner, but a research and engineering tool built around IPv6 target generation, probing, result analysis, and remote scanning. The CLI provides commands such as scan, train, generate, analyze, and serve, making it suitable for IPv6 active address discovery, network measurement, and protocol probing pipelines.

Core Capabilities

Functionally, rmap covers the full loop from training models on seed targets and generating IPv6 addresses to running scans and analyzing results. On the scanning side, it supports probes such as ICMP, TCP SYN, UDP, TCP SYN-ACK, DNS, and NTP, with configurable transport parameters including PPS, timeout, network interface, and source IPv6 address. Results can be streamed or written to CSV, with selectable fields such as DNS response code, NTP stratum, TCP flags, and dealiasing labels.

Target generation is one of its standout features. The documentation lists algorithm/model entry points including Entropy/IP, Random IP, 6Gen, 6Forest, 6Graph, 6Tree, DET, 6Probe, 6GAN, 6GCVAE, and 6VecLM. It also supports dealiasing, carrying metadata such as alias and alias_prefix into results to reduce the impact of IPv6 alias space on measurements.

API, Integration, and Deployment

rmap is distributed as a single-binary CLI and can be downloaded from GitHub releases. Its self-hosting capabilities are relatively clear: scans can be run directly on a local machine, or a remote worker can be started with rmap serve and tasks distributed using --remote HOST:PORT. The documentation also mentions a gRPC server, the Python API pyrmap, and plugin extensions for target generation, probes, and dealiasers. The CLI supports pipes, redirection, and streaming output, making it easy to integrate into existing automation scripts.

Pricing and Documentation

The main documentation does not provide commercial pricing, paid plans, or payment methods. The page includes a GitHub link, but does not specify the license. Usage examples are fairly rich, covering installation, scanning, protocol parameters, and workflows. However, the API Reference is explicitly marked as still in progress, and there is limited information on production-grade API references, stability commitments, or support channels.

Pros, Cons, and Best-Fit Users

Its strengths are its strong IPv6 focus, broad set of target generation algorithms, and complete protocol probing and remote scanning capabilities. It is well suited to network measurement researchers, security researchers, and engineering teams that need to build their own IPv6 scanning platform. Its drawbacks are the relatively high learning curve and the risk that misuse may trigger rate limits or IDS alerts. It also lacks clear information on licensing, commercial support, and complete API documentation, making it less suitable for users who want an out-of-the-box visual platform.

Access from China

The source text does not make it possible to determine the actual connectivity of rmap.io, GitHub releases, or related APIs from mainland China, so this is marked as unknown. If downloads from GitHub are unstable, alternatives such as ZMap, Masscan, Nmap, or a custom Scapy-based solution may be considered.