The History and Future of Nmap
The History and Future of Nmap
The History and Future of Nmap
September 1, 1997 — Nmap is first released in Phrack magazine Issue 51, Article 11. It doesn't have a
version number because new releases aren't planned. Nmap is about 2,000 lines long, and compilation is
as simple as gcc -O6 -o nmap nmap.c -lm.
September 5, 1997 — Due to popular demand, a slightly improved version of the Phrack code is
released, calling itself version 1.25. The gzipped tarball is 28KB. Version 1.26 (48KB) is released 19 days
later.
January 11, 1998 — Insecure.Org is registered and Nmap moves there from its previous home at the
DataHaven Project ISP.
December 12, 1998 — Nmap version 2.00 is publicly released, introducing Nmap OS detection for the
first time after several months of private development.
April 11, 1999 — Nmap 2.11BETA1 is released. This is the first version to contain a graphical user
interface as an alternative to the traditional command-line usage.
April 28, 2000 — Nmap 2.50 is released. By this point the tarball has grown to 461KB.
July 9, 2001 — The Nmap IP ID idle scan is introduced with Nmap 2.54BETA26. A paper describing the
technique is released concurrently.
August 28, 2002 — Nmap is converted from C to C++ and IPv6 supported is added as part of the Nmap
3.10ALPHA1 release.
September 16, 2003 — Nmap service detection is publicly released as part of Nmap 3.45.
February 20, 2004 — Nmap 3.50 is released. The tarball is now 1,571KB.
August 31, 2004 — The core Nmap port scanning engine is rewritten for Nmap 3.70.
June 25, 2005 — Google sponsors 10 college and graduate students to work on Nmap full time for the
summer as part of Google's Summer of Code initiative.
September 8, 2005 — Nmap gains raw ethernet frame sending support with the release of version 3.90.
January 31, 2006 — Nmap 4.00 is released. The tarball is now 2,388KB.
May 24, 2006 — Google sponsors 10 more Nmap summer developers as part of their SoC program.
June 24, 2006 — After two years of development and testing, the 2nd generation OS detection system is
integrated into Nmap 4.20ALPHA1.
December 10, 2006 — The Nmap Scripting Engine is released as part of Nmap 4.21ALPHA1.
July 8, 2007 — The Zenmap graphical front end (back then it was called Umit) is improved and
integrated into the Nmap 4.22SOC1 release for testing.
June 1, 2008 — Nmap 4.65 is released and includes, for the first time, an executable Mac OS X installer.
The Nmap source tarball is now four megabytes.
September 8, 2008 — Nmap 4.75 is released with almost 100 significant improvements over 4.68.
January 23, 2009 — Added Ncat, a feature-packed networking utility which reads and writes data across
a network from the command line.
January 23, 2009 — Added the Ndiff utility which compares the results of two Nmap scans,
March 30, 2009 — A special Nmap release (4.85BETA5) is produced to remotely detect the Conficker
worm which has infected millions of machines on the Internet.
June 12, 2009 — Added SCTP port scanning and host discovery support to Nmap.
July 16, 2009 — Released Nmap 5.00. The tarball is more than 27MB and contains 2,003 OS fingerprints,
5,512 version detection signatures, and 59 NSE scripts.
May 21, 2012 — Nmap 6 was released! The tarball is more than 54MB.