THC-Amap For Linux

THC-Amap is a next-generation tool for assistingnetwork penetration testing. It performs fast and reliable application protocol detection, independant on the TCP/UDP port they are being bound to.

THC-Amap is a next-generation scanning tool for pentesters. It attempts to identify applications even if they are running on a different port than normal.

It also identifies non-ascii based applications. This is achieved by sending trigger packets, and looking up the responses in a list of response strings.

Currently there are two tools for this purpose: amap (you are looking at it), and nmap. Both have their strength and weaknesses, as they deploy different techniques. We recommend to use both tools for reliabe identification.

This tool is for legal purposes only!

If this tool is used as part of a commercial service (e.g. pentest), name, version and web address of this tool must be mentioned in the report.

If this tool is incorporated into a commercial tool (means: it costs money, has license costs or upgrade fees, etc.) or called by it, the name, version and web address of this tool must be mentioned in the report output of the tool. Addtionally, a commercial version, key file, etc. must be made available to the authors free of charge.