naabu

Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN scans on the host/list of hosts and lists all ports that return a reply.

Name:naabu

Category:Network

Publisher:trickest

Created:6/23/2021

Container:quay.io/trickest/naabu:v2.3.5

Output Type:

License:Unknown

Source:View Source

Parameters

cdn · boolean

-display-cdndisplay cdn in use

host · string · required

-hosthosts to scan ports for (comma-separated)

rate · string

-rateRate of port scan probe request (default 1000)

proxy · string

-proxysocks5 proxy (ip[:port] / fqdn[:port])

stats · boolean

-statsDisplay stats of the running scan

nd-ping · boolean

-nd-pingIPv6 Neighbor Discovery (host discovery needs to be enabled)

passive · boolean

-passivedisplay passive open ports using shodan internetdb api

threads · string

-cGeneral internal worker threads (default 25)

timeout · string

-timeoutMillisecond to wait before timing out (default 700)

verbose · boolean

-vShow verbose output

arp-ping · boolean

-arp-pingARP ping (host discovery needs to be enabled)

no-colors · boolean

-no-colorDon't Use colors in output

resolvers · file

-rlist of custom resolvers for dns resolution

scan-type · string

-scan-typetype of port scan (SYN/CONNECT) (default s)

source-ip · string

-source-ipsource ip and port (x.x.x.x:yyy)

top-ports · string

-top-portsTop Ports to scan (default top 100)

csv-output · boolean

-csvWrite output in CSV format

debug-mode · boolean

-debugdisplay debugging information

hosts-list · file · required

-lList of hosts to scan ports

ip-version · string

-ip-versionip version to scan of hostname (4,6) - (default 4)

ping-probe · boolean

-pingPerform ping probe to detect alive hosts

ports-file · file

-ports-fileFile containing ports to scan for

proxy-auth · string

-proxy-authsocks5 proxy authentication (username:password)

exclude-cdn · boolean

-exclude-cdnSkip full port scans for CDNs (only checks for 80,443)

json-output · boolean

-jsonWrite output in JSON lines format

exclude-file · file

-exclude-fileList of hosts to exclude from scan

scan-all-ips · boolean

-scan-all-ips Scan all the ips

warm-up-time · string

-warm-up-timeTime in seconds between scan phases (default 2)

exclude-hosts · string

-exclude-hostshosts to exclude from the scan (comma-separated)

exclude-ports · string

-exclude-portsPorts to exclude from scan

probe-tcp-ack · boolean

-probe-tcp-ackTCP ACK Ping (host discovery needs to be enabled)

probe-tcp-syn · boolean

-probe-tcp-synTCP SYN Ping (host discovery needs to be enabled)

host-discovery · boolean

-host-discoveryRun Host Discovery scan

port-threshold · string

-port-thresholdport threshold to skip port scan for the host

stats-interval · string

-sinumber of seconds to wait between showing a statistics update (default 5)

validate-ports · boolean

-verifyValidate the ports again

probe-icmp-echo · boolean

-probe-icmp-echoICMP echo request Ping (host discovery needs to be enabled)

ports-to-exclude · string

-exclude-portsPorts to exclude from enumeration

ports-to-enumerate · string · required

-portPorts to enumerate for on hosts (top-100, top-1000, full, custom)

skip-host-discovery · boolean

-skip-host-discoverySkip Host discovery

probe-icmp-timestamp · boolean

-probe-icmp-timestampICMP timestamp request Ping (host discovery needs to be enabled)

probe-icmp-address-mask · boolean

-probe-icmp-address-maskICMP address mask request Ping (host discovery needs to be enabled)

only-host-port-in-output · boolean

-silentShow only host:ports in output

number-of-retries-for-port-scan · string

-retriesNumber of retries for the port scan probe (default 1)