• ASSET
  • NETWORK
  • SERVICE
  • HUMAN

How to map an attack surface with your AI

Connect Nmap Online to your AI client to turn a single domain into a detailed map of its digital footprint.

Ask AI about this page

Short answer

How can I map an attack surface using AI?

Your AI uses Nmap Online to crawl subdomains, resolve DNS records, and scan for open ports. This builds a structured profile of a target's infrastructure. You get a full list of active services and entry points.

Reconnaissance outcomes.

Where your data lands.

Once the scan finishes, your AI organizes the findings into these specific categories.

ASSET

Subdomain inventory

The AI identifies all reachable subdomains. You get a clean list of every host associated with the target domain.

NETWORK

Open port map

The AI finds which ports are listening. This shows you exactly where the target is exposed to the internet.

SERVICE

Active service profiles

The AI detects the specific software and versions running on open ports. This identifies the actual services being used.

HUMAN

Vulnerability triage

The AI flags suspicious configurations. You decide which findings represent real risks that require manual testing.

The workflow

What your AI does when the target arrives.

The AI handles the heavy lifting of network discovery so you can focus on the analysis.

  1. Discover subdomains

    The AI starts by finding all subdomains linked to your primary target to expand the scope.

    list_subdomains

  2. Resolve hostnames

    The AI performs DNS lookups to ensure every discovered subdomain has a valid IP address.

    dns_lookup

  3. Scan for ports

    The AI probes the discovered IP addresses to find open ports and active services.

    nmap_scan

  4. Build the profile

    The AI aggregates the subdomains, IPs, and service data into a single coherent infrastructure map.

    dns_lookupnmap_scan

Try it

Copy these to start.

Use these prompts to kick off your reconnaissance.

Starting points

Replace the domain names in these prompts with the actual targets you want to scan.

Nmap Online Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_zzcXTxJo17l0QjaigBuLdOKCDddybQ6rHt7cdH4s/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Nmap Online capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "nmap-online-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_zzcXTxJo17l0QjaigBuLdOKCDddybQ6rHt7cdH4s/mcp"
    }
  }
}
Copy into chat04

  • List all subdomains for example.com and tell me what you find.

  • Run an nmap scan on the IP 192.168.1.1 to find open ports.

  • Perform a dns_lookup for mail.targetsite.net and report the IP.

  • Map the entire attack surface for target-corp.com by finding subdomains and scanning their ports.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Nmap Online once, then ask.

Just link the MCP to your client. Your credentials stay encrypted, and you can start scanning immediately.

Connect Nmap Online to your AI

FAQ

How this task behaves

  • 01

    Can the AI run the scans itself?

    Yes. Your AI client triggers the tools in the MCP to perform the actual scanning and lookups.

  • 02

    Can the AI change my network settings?

    No. The AI only reads data and performs scans through the provided tools. It cannot modify your local machine or network configuration.

  • 03

    Does the AI automatically exploit vulnerabilities?

    No. The tools are for discovery and mapping only. The AI identifies open ports and services, but it does not perform any exploitation or attacks.

  • 04

    Will the AI save the scan results to my hard drive?

    No. The AI processes the data within your chat session. You must manually save any information you want to keep.

  • 05

    Can I use this to scan any IP address?

    Yes, as long as you provide a valid IP or domain that the tools can reach.

  • More questions about Nmap Online? The Connector page answers them. See everything the Nmap Online Connector can do

Connect Nmap Online to Claude, Cursor, ChatGPT & more