GSoC community ideas/Scanning from within Tor
From SecWiki
Currently Nmap can't scan Tor hidden services straight out of the box (I heard that there was an experimental patch around that solved this though). Also, scanning the Internet hosts requires quite a lot of dancing. These could be useful features to have. (Added by d33tah)