asaotomo/FofaMap

python3 -m pip install -r requirements.txt

Usage

• •Fill in your FOFA email and 32-hex key under [userinfo] in fofa.ini, and set fields/start_page/end_page as needed.
• •Query with python3 fofamap.py -q 'title="Apache APISIX Dashboard"' (Windows users must escape inner quotes with backslashes).
• •Use -o to set the output Excel filename, or -s for deduplicated ip:port scan-format output saved to a txt file.
• •Control output fields and order by editing fields in fofa.ini.

Key features

• ✓Customizable FOFA queries and output fields (ip, port, title, country, header, cert, icp, and more).
• ✓Excel (.xlsx) export plus automatic ip:port text export for scanners with deduplication.
• ✓Configurable query page range via start_page/end_page.
• ✓Command-line table-style output (added in 1.0.1).

Best for

Security researchers self-testing assets by harvesting FOFA asset data into Excel or scanner lists.

Caveats

• ⚠Requires a FOFA account email and API key; query quotas depend on membership tier (regular users pay 1 F-coin per up to 10,000 results).
• ⚠Author's notice: for security self-checking only, not for commercial use, and users are responsible for compliance with local law.
• ⚠README is Chinese-only; this is a CLI tool, not an MCP server.
• ⚠Windows users must escape quotes in FOFA query statements.