Zond is a lightweight, fast network mapping and discovery tool designed for Linux and macOS.
- Supported Platforms: Linux, macOS
- Unsupported: Windows is not currently supported.
Zond is available on the AUR. You can install it using an AUR helper like yay:
yay -S zond
For other Linux distributions and macOS, you must build the tool from source. Ensure you have the Rust toolchain installed.
- Clone the repository:
git clone https://github.com/hollowpointer/zond
cd zond
- Build the release executable:
cargo build --release
- Locate the binary:
The compiled binary will be available in
target/release/zond. You may move this to your/usr/local/binor add it to your$PATH.
Note on Privileges: Network discovery operations utilizing raw sockets typically require root privileges. Most discovery commands should be prefixed with sudo.
The discover command (alias: d) scans targets for active hosts. It retrieves IP addresses (IPv4/IPv6), MAC addresses, vendors, and hostnames.
Syntax:
sudo zond discover <target> [flags]
Examples:
- Automatic LAN Scan: Detects the local subnet and scans for active hosts.
sudo zond d lan
- Complex Ranges & Subnets: Zond supports CIDR notation and mixed targets in a single command.
sudo zond d 1.1.1.1/28 1.1.1.128/26
- Range Shorthand: Use hyphens to define ranges. If the end of the range is a partial octet, Zond automatically fills the preceding octets from the start address.
# Scans from 10.0.0.1 to 10.0.2.128
sudo zond d 10.0.0.1-2.128
The info command (alias: i) displays detailed configuration regarding the local machine. This includes:
- Network Interfaces
- Firewall Status
- Local Services (Open ports/processes on TCP/UDP)
- System Details (OS, Kernel, Hostname)
Example:
sudo zond i
Zond provides several flags to customize output density, logging levels, and privacy settings.
| Flag | Description |
|---|---|
-n, --no-dns |
Disables sending of DNS packets. |
--no-banner |
Keep logs and colors but hide the ASCII art. |
-q, --quiet |
Reduce UI visual density. Use -q to reduce styling or -qq for raw IP output. |
--redact |
Redact sensitive info (IPv6 suffixes, MAC addresses, etc.). |
-v, --verbose |
Increase logging detail. Use -v for debug logs or -vv for full packet logs. |
-h, --help |
Print help. |
MIT