Information Gatheringport scannersyn scanconnect scanhost discoveryservice discoverynmap integration

Naabu

Naabu is a fast port scanner written in Go that enumerates open ports on hosts reliably and simply. It performs SYN/CONNECT scans and lists responsive ports.

Description

Naabu is a port scanning tool designed for speed, reliability, and ease of use. It excels in scanning hosts or lists of hosts to identify open ports using SYN or CONNECT probes, making it lightweight on resources. Key features include automatic handling of duplicate hosts, NMAP integration for service discovery, and support for piped input/output in workflows.

Use cases include reconnaissance in penetration testing, network mapping, and vulnerability assessment where quick port enumeration is needed. It supports multiple input formats like HOST/IP/CIDR and various output formats such as JSON, CSV, or files, facilitating integration into larger scanning pipelines.

Naabu offers host discovery options, rate limiting, and optimizations like retries and timeouts, ensuring flexibility across different network environments. Additional capabilities include CDN detection and ProjectDiscovery cloud integration for result management.

How It Works

Naabu operates by sending SYN or CONNECT probes to specified ports on target hosts, listening for replies to identify open ports. It supports host discovery via TCP SYN/ACK, ICMP echo/timestamp/address-mask pings when enabled. Optimized for concurrency with configurable worker threads and packet rates, it handles DNS resolution for multiple IPs, excludes duplicates, and optionally verifies ports with TCP connect or integrates NMAP for service versioning. Rate limiting, retries, and timeouts ensure reliable operation across networks.

Installation

bash
sudo apt install naabu

Flags

-hosthosts to scan ports for (comma-separated)
-list, -llist of hosts to scan ports (file)
-port, -pports to scan (80,443, 100-200)
-top-ports, -tptop ports to scan (default 100) [full,100,1000]
-cgeneral internal worker threads (default 25)
-ratepackets to send per second (default 1000)
-o, -outputfile to write output to (optional)
-json, -jwrite output in JSON lines format
-sn, -host-discoveryPerform Only Host Discovery
-sD, -service-discoveryService Discovery

Examples

Display help and usage information for naabu
naabu -h
Scan ports on a single host
naabu -host example.com
Scan ports for a list of hosts from a file
naabu -list hosts.txt
Scan top 1000 ports on targets
naabu -top-ports 1000
Scan host and save output to file
naabu -host example.com -o results.txt
Scan host and output in JSON lines format
naabu -host example.com -json
Perform only host discovery
naabu -sn
Updated 2026-04-16kali.org ↗