{
  "id": 16170627,
  "title": "I built Nmap Studio: a local browser UI for the Nmap suite",
  "url": "https://urgent.news/2026/10/23/i-built-nmap-studio-a-local-browser-ui-for-the-nmap-suite",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-23T09:47:15.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/aymenki/i-built-nmap-studio-a-local-browser-ui-for-the-nmap-suite-18a2"
  },
  "original_language": "en",
  "account": "Mike recently discovered the need to switch between Nmap manual, terminal commands, and saved scan notes. He aimed to create a single location where he could construct a command, run it, and comprehend the outcome without obscuring Nmap's actions. Consequently, he developed Nmap Studio, a local browser interface for Nmap and its accompanying tools. Source code: https://github.com/aymenki/nmap-studio\n\nThe interface presently supports Nmap, Ncat, Nping, and Ndiff. Users can configure common scan options using standard form controls, observe output while a command is executing, halt a job, feed input to Ncat, save scan profiles, and examine recent output. Additionally, there is an XML report viewer and a search function for 612 NSE scripts. Mike did not attempt to replace every command-line option with a button. More uncommon options can still be incorporated through the advanced argument editor.\n\nTo utilize Nmap Studio, you require Python 3.10 or higher, along with the official Nmap tools installed on your system's PATH. No additional Python packages are necessary. Execute python server.py on any compatible operating system. On Windows, you may also run start.cmd. The interface loads at http://127.0.0.1:8765.\n\nSecurity considerations are essential since this tool can execute genuine network commands. Nmap Studio has been designed for local use only. The server listens exclusively on loopback, verifies Host and Origin on requests that modify state, employs a per-session token, and does not enable CORS. The commands are initiated as argument lists without passing them through a shell. It still runs under your user account's permissions. Please keep the runner local, and scan only systems you own or are authorized to test. This tool is an independent project and is not affiliated with or endorsed by the Nmap project. Mike invites feedback on the following aspects: the comprehensibility of the scan builder, missing elements in the Nmap, Ncat, Nping, or Ndiff workflows, security concerns in the local runner, and any issues on Linux or macOS. Please provide your thoughts and suggestions, or report any confusion you encounter by opening an issue on GitHub.",
  "summary": "I kept finding myself switching between the Nmap manual, terminal commands, and saved scan notes. I wanted one place where I could build a command, run it, and understand the result without hiding what Nmap is doing. So I built Nmap Studio , a local browser interface for Nmap and the other tools that come with it. GitHub: https://github.com/aymenki/nmap-studio What it does The interface currently…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}