

项目说明
<di="center">
L0p4Map
!Traffic Analyzer
Nmap was blind. L0p4Map sees.
!Python
!Platform
!License
!Status
Professional network monitoring & tool built for security researchers.
</div>
---
What is L0p4Map?
L0p4Map is a professional grade network monitoring tool that combines the power of nmap with a clean, modern dark UI. Designed for security researchers and network administrators who need fast, detailed into their infrastructure.
No bloat. No BS. Just raw network intelligence.
Now a on Linux, Windows and macOS.
---
Features
Multi-Platform Support: works on Linux (Debian/Arch), Windows and macOS with the same interface and the same feature setContinuous Monitoring: lightweight daemon/agent that passively watches ARP and mDNS traffic without needing to rescan the whole networkAlerting: real time notification when a new, unauthorized device appears on the networkContinuous SNMP Polling: periodic SNMP queries to keep device status updated in real time, without waiting for the next scan cycleARP Network Scan: fast host discovery with local IEEE OUI database lookupRange Cartography: scan any IP / CIDR / range. Routed ranges are mapped (hosts grouped under their last hop router)Hostname Resolution: multi method detection DNS, NetBIOS (Windows) and mDNS/Avahi (Linux, Mac, IoT)Device Fingerprinting: TTL based OS hint (Linux/macOS, Windows, network device), TCP port probing on topology relevant ports, raw SNMP sysDescr query (no external libs)Embedded Service Fingerprinting: passively detects iLO / InfoPrint / XPort / SATO / Zebra grabbing and flags them on the graph as devices known to ship with default credentials, for manual Role Detection: automatic classification of each host: gateway, router, access point, switch, PC, Apple, mobile, Raspberry Pi, machine, unknown, combining , hostname, TTL, open ports and SNMP responseReal Network Topology Graph: hierarchical vis.js graph that reflects the actual network structure: gateway at the top, intermediate devices (routers/APs/switches) on a second tier, clients grouped below their parent. Toggleable between Hierarchical and Force Atlas layoutsSubnet Bounding Boxes: each detected subnet is drawn as a dashed o directly on the graph canvas, labeled with its CIDRTyped Edges: three distinct link types: uplink (gateway to internet), backbone (intermediate device to gateway), client link (device to parent)Topology Panel: li showing subnet, gateway IP, total devices and intermediate device countFull nmap Integration: SYN scan, UDP, OS detection, service , NSE scriptsBanner Grabbing: HTTP, SMB, FTP, SSH, SSL enumeration Detection: C , vuln and malware scriptsAttack Surface: exposed services, open ports and C per host with C and direct NVD link; results exportable as CSVTraffic Analyzer: real time packet capture with per device stats, protocol coloring, filter bar, double click to port scan; exportable as CSVTraceroute: ICMP based with real time outputInterface Selection: choose which network interface to scan onLi: auto refresh the network graph at configurable intervals (30s / 60s / 120s)Scan Export: save full nmap output to .txtGraph Export: export the network topology as CSV or PNGCustom Node Labels: assign custom names to any device directly on the graph (double click)Dark Professional UI: built with PyQt6---
Screenshots
Home: Network Scanner
!Home
Port Scan: Full nmap Integration
!Port Scan
Network Topology: Hierarchical topology graph
!Network Topology Graph | Hierarchical
Network Topology: Force Atlas layout
!Network Topology Graph | Force Atlas
Attack Surface: Exposed services, open ports and o
!Attack surface section
Traffic Analyzer: Real-time network traffic analysis
!Traffic Analyzer
---
Requirements
Linux (Debian or Arch)
Python 3.11+nmap installed (sudo pacman -S nmap or sudo apt install nmap)Npcap/libpcap for packet capture (normally already present on Debian/Arch)Root pri (required for ARP scanning and packet capture)Windows 10/11
Python 3.11+Nmap for Windows (official installer from nmap.org, includes Npcap)Npcap installed in "WinPcap API-compatible" mode (required for packet capture)Run as Administrator (required for ARP scanning and packet capture)macOS (Intel and Apple Silicon)
Python 3.11+nmap installed (brew install nmap)Root pri (required for ARP scanning and packet capture)---
Installation
Linux
Arch Linux users can install directly from the AUR:
Alternatively, on any Linux distribution:
macOS
Windows
Make sure nmap and Npcap are installed and a in the system PATH before launching the tool.
---
Usage
Linux and macOS
Launch the tool with root pri:
Windows
Open a terminal (PowerShell or CMD) as Administrator, then:
Workflow
1. Select the network interface from the toolbar dropdown
2. Press [ SCAN ] to discover all devices: each host is fingerprinted via TTL, port probing and SNMP
3. Click a device to see details and run quick actions (ping, traceroute, port scan)
4. Switch to Graph to explore the real network topology: ho for full device info, double click to assign a custom label
5. Toggle between [ HIERARCHICAL ] and [ FORCE ATLAS ] layout from the graph view
6. Use Attack Surface to run a deep nmap + scan on any host and review CVEs
7. Use Traffic Analyzer to capture li, filter by device or protocol, and export to CSV
8. Enable [ LIVE ] in the graph view to keep the topology updated automatically
9. Enable Continuous Monitoring to keep the agent passively listening on ARP/mDNS and recei on new devices, without having to restart a full scan
---
Legal Disclaimer
This tool is designed for authorized network auditing only. Only use L0p4Map on networks you own or ha permission to test. Unauthorized scanning is illegal.
---
Author
HaxL0p4: GitHub
---
项目信息
开发语言:Python
Star 数:963
技术要点
该项目属于安全软件方向的开源资源,代码结构清晰,适合安全研究人员学习参考。项目围绕Professional network monitoring & visualization tool. L0P4Map combines high-speed ARP discovery with full nmap integration and a real-time interactive network topology engine. Works on both local networks and custom IPs/websites.展开,提供了可运行的实现,对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看,此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论,梳理项目的初始化流程、核心模块职责与数据流转,逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包,解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证,避免影响生产系统。
免责声明
本资源来源于开源社区,仅供安全研究、技术学习与合法授权范围内的攻防演练使用,请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。