Umap (UPNP Map) attempts to scan open TCP ports on the hosts behind a UPNP enabled Internet Gateway Device(IGD) NAT. It sends SOAP requests to map ports and then attempts to connect to the mapped ports discovering hosts and services behind the device’s NAT.
You can download it from the following link: https://packetstormsecurity.com/files/download/90598/umap-bypass.txt
Source: https://packetstormsecurity.com/files/90598/Umap-UPNP-Map-0.1beta.html