Is your feature request related to a problem? Please describe.
support for flags In case the user wants to escalate or drop privilege as per need and scan types.

Describe the solution you'd like

-privileged: Assume that the user is fully privileged
-unprivileged: Assume the user lacks raw socket privileges

Similar flags as nmap.

[FTL] Exiting, You must be a privileged user to run this scan
with sudo:

sudo: naabu: command not found

Scanning for open ports is not reliable.
I have tried different rates from 50-1000 but still i am getting different responses. like below.
echo 'hackerone.com' | naabu -ports top-100 -rate 100

and for sure that port 8443 is not open on hackerone.com (as far as i know)

From:
{"host": "", "ports": "80"}
{"host": "", "ports": "443"}
{"host": "", "ports": "8043"}

TO:
{"host": "", "ports": "80,443,80443,...."}

I think this will be really helpful for hunters

Also if possible, can be good to add localhost scanning support too.

Hey Team! Hope You all are Doing Well.
I hv moved it to /usr/bin/naabu, but still the error is :
bash: /usr/bin/naabu: No such file or directory

Hope you will Help me Out cause i m Stuck here and am Very Desperate to Use naabu

If you encounter a firewall, many, many ports will be returned.

how to solve?

• As default should be true, with a flag to disable randomization.

to display some indication showing the current state of the scan.

When trying to use the output options -o file or -oJ -o file.json for example, no files get created?

1. Ping probe fails on certain subdomains for hosts like braintree-api.com
2. Error message is too verbose.

Hello,

I'm looking for optimization options.

Is the "retries" option required?

If data is set to zero, it cannot be detected properly.

For example:

$ naabu  -retries 0 -host google.com
[INF] Starting scan on host google.com (172.217.5.110)
[INF] No ports found on google.com (172.217.5.110). Host seems down

$ naabu -retries 1 -host google.com
[INF] Starting scan on host google.com (172.217.5.110)
[INF] Found 2 ports on host google.com (172.217.5.110)
google.com:443
google.com:80

Thanks

Is your feature request related to a problem? Please describe.
There is required steps that, although fairly trivial, would be beneficial to document in the README file.

Describe the solution you'd like
I propose to append the following to the section regarding Helper scripts:

Helper scripts on MacOS

The helper scripts require gsed to run. gsed is available through brew as

brew install gsed

With Catalina and onward Bash has been replaced by Zsh as default shell. Although Bash is still present, it may not continue to be and as such, your commands would look as

> echo hackerone.com | naabu -silent | zsh naabu2nmap.sh
> echo hackerone.com | naabu -silent | zsh prepare4nmap.sh

/ Casper

root@b0x:~# naabu -host hackerone.com -oJ -silent 

hackerone.com:80
hackerone.com:443
hackerone.com:8443
hackerone.com:8080

As of now, the output will be written in json format to the file if -o flag is used, additionally -oJ flag can be renamed to -json to match with other opensource tools.

github.com/google/gopacket/pcap

/root/go/src/github.com/google/gopacket/pcap/pcap_unix.go:34:10: fatal error: pcap.h: No such file or directory
#include <pcap.h>
^~~~~~~~
compilation terminated.

Looks like the pcap package is no longer available the google repo

While scanning without specifying the ports return 80 and 443

naabu -host example.com
                  __
  ___  ___  ___ _/ /  __ __
 / _ \/ _ \/ _ \/ _ \/ // /
/_//_/\_,_/\_,_/_.__/\_,_/ v1

		projectdiscovery.io

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
[INF] Using host example.com for enumeration
[INF] Starting scan on host example.com (93.184.216.34)
[INF] Found 2 ports on host example.com (93.184.216.34)
example.com:80
example.com:443

But while scanning using full port scan it is returning no ports open , excluding the previous 80 and 443 as show below

 naabu -ports full -host example.com
                  __
  ___  ___  ___ _/ /  __ __
 / _ \/ _ \/ _ \/ _ \/ // /
/_//_/\_,_/\_,_/_.__/\_,_/ v1

		projectdiscovery.io

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
[INF] Using host example.com for enumeration
[INF] Starting scan on host example.com (93.184.216.34)
[INF] No ports found on example.com (93.184.216.34). Host seems down

linux amd64, I have moved it to /usr/bin/naabu, but error
-bash: /usr/bin/naabu: No such file or directory

"-Pn | Perform ping probe to detect alive hosts"

Might be confusing when it means the opposite in nmap.

Any help is appreciated

Let's add all the available information at the start of the scan.

• Scan method
• Running user permission

Few flag updates for making it simple to adopt:-

• replacing hL with iL, (iL as input list)
• updating host as default input along with existing host flag (naabu 1.1.1.1 or naabu -host 1.1.1.1 )
• replacing ports with p (naabu -p 80, 8000-9000, 9443,443)
• adding top-ports (naabu -top-ports 100)

To ease the process of reporting bugs in naabu, we should introduce an additional flag which will create a naabu.log file containing raw packets or any information required to inspect the issue, which later users can submit here or on discord while reporting issues.

naabu -host test.com -debug 

When I extract from naabu binary the contents extracted are :
tar -xzvf naabu_1.1.2_linux_amd64.tar.gz
LICENSE
README.md
nuclei
I thought maybe thats a typo error. And so I did :
sudo mv nuclei /usr/bin/naabu
It was successfully done but when I called it with:
$naabu
It shows:
bash: /usr/bin/naabu: No such file or directory
Please help me fix it!

failed when install
my os ubuntu 18.04

anyone can help?

To reproduce this, run the following cmd on the testing box:-

root@b0x:~/naabu-test# ls
ips.txt

1. root@b0x:~/naabu-test# naabu -hL ips.txt
2. root@b0x:~/naabu-test# naabu -hL ips.txt -ports full

Notice the differences.

A lot of boxes will not respond to a SYN scan. Including an ICMP echo request along with the port sweep would significantly reduce the amount of targets classified to be offline.

Describe the solution you'd like

A config file allowing users to set custom rules for different kinds of scans, so instead of feeding multiple CLI, users can simply provide a config file to perform a custom scan.

Subfinder make use of config file $HOME/.config/subfinder/config.yaml, same can be done for naabu as well $HOME/.config/naabu/config.yaml

Example of the config file:-

# Host to scans

host:
    - uber.com
    - 1.1.1.1
    - 192.168.1.0/24

# OR 

host:
    - uber.com, 1.1.1.1, 192.168.1.0/24

# Full port scan
p:
    - '-'

# Custom list of ports to scan
p:
    - '20,30,45,100-200,400'

# Top ports to scan
top-ports:
    - 100

# Exclude CDN full port scan. 
exclude-cdn:
    - true

# List to hosts to exclude from the scan
exclude-hosts:
    - 192.168.0.1, 192.168.0.2, 192.168.0.3, 127.0.0.1

# OR 

exclude-hosts:
    - 192.168.0.1
    - 192.168.0.2
    - 192.168.0.3
    - 192.168.0.4

# List to ports to exclude from the scan
exclude-ports: 
    - 25, 21, 22

# OR 

exclude-ports: 
    - 25
    - 21
    - 22

In this way, one can define all configurable flags using the config files.

Suggested flag:- config

Example:-

naabu -iL hosts.txt -config config.yaml

Is your feature request related to a problem? Please describe.
Add Stop/Resume capability

Describe the solution you'd like
Scanning should support Stop/Resume

• Adding support to list available interfaces ( interface-list)
• Interface input validation.
• Displaying Interface and source IP information.

I am using Kali latest version , when scanned hackerone with naabu it showed host seems down and when scanned with nmap it's worked fine , I know in past there was same issue as I saw in closed issues, but it doesn't seems to be fixed.

natsu@DESKTOP-T32LAE7:~/go/bin$ sudo ./naabu -host hackerone.com

              __

___ ___ ___ / / __ __
/ _ / _ / _ / _ / // /
////_,/_,/.__/_,_/ v1

            projectdiscovery.io

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
[INF] Using host hackerone.com for enumeration
[INF] Starting scan on host hackerone.com (104.16.99.52)
natsu@DESKTOP-T32LAE7:~/go/bin$

We can integrate cdncheck into naabu for this which checks and returns true or false for a given host.

If this flag is used and it returns true we can simply avoid the host for full port scan and perform only 80 and 443 checks.

Suggested flag:- exclude-cdn

I downloaded and installed from source on kali. Tried to use naabu to scan a HTB machine (Mango) using the command:
naabu -host 10.10.10.160 -v

the result was:

[INF] Using IP 10.10.10.160 for enumeration
[INF] Starting scan on host 10.10.10.160 (10.10.10.160)
[WRN] Could not start scan on host 10.10.10.160 (10.10.10.160): mismatched hardware address sizes

then program just exits.

I have naabu installation error on a 32bit pc. My guess is 32/64 bit difference. Is there a solution?

Error log

$ go get -v github.com/projectdiscovery/naabu/cmd/naabu
github.com/projectdiscovery/naabu/pkg/scan
# github.com/projectdiscovery/naabu/pkg/scan
../../go/src/github.com/projectdiscovery/naabu/pkg/scan/scan.go:143:36: constant 8999999999 overflows int

ENV

- Ubuntu 18.04.4 LTS (kernel 4.15.0-88-generic)
- 32bit computer
- installed libpcap-dev

Problem:-

• Port responds with "Open" status for any port you request.

Possible solution:-

• Detect hosts with wildcard ports and eliminate them from the scan.

It's an issue for the discussion, more things need to be explored to understand this issue better.

exiting , you must be a privilaged user to run this scan

after this i used like sudo naabu but giving naabu didnt found

Windows scans get stuck without finishing. Tried on Windows 10 x64 with npcap latest version.

Possible scenario to consider for port scan distribution and keeping reliability at priority.

• Single host single (limited) ports.
• Single host (limited) multiple ports.
• Multiple hosts single port.
• Multiple hosts multiple ports

related to this, a few more things to consider.

• Port randomisation
• Sequential scan

There is a possibility that some domains point to RFC1918 IP addresses. Scanning those IP addresses could lead a BAN from the cloud service provider. So it would be nice to have a feature to filter those IPS and blacklist them from scanning it.

• This is needed for further testing.

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
[FTL] Program exiting: no input list provided
naabu -ports full-exclude-ports 80,443 -hL /root/Desktop/recon/xxx/exmple -o exmport.txt

Hello,

As of right now, Go does not download/install the latest repo version.

go: downloading github.com/projectdiscovery/naabu v1.1.2

Would be great a stealth/passive/aggressive arg option

Originally posted by @bsysop in #2 (comment)

echo hackerone.com | ./naabu -json -silent 

{"host":"hackerone.com","port":8080}
{"host":"hackerone.com","port":8443}
{"host":"hackerone.com","port":443}
{"host":"hackerone.com","port":80}

with new update:-

echo hackerone.com | ./naabu -json -silent 

{"host":"hackerone.com","ip":"104.16.99.52","port":8080}
{"host":"hackerone.com","ip":"104.16.99.52","port":8443}
{"host":"hackerone.com","ip":"104.16.99.52","port":443}
{"host":"hackerone.com","ip":"104.16.99.52","port":80}

In the case of IP as input, either we can remove the host field for JOSN format or keep it empty.

On virtual network interfaces the scan needs to be performed at socket level as routing and hardware layer are already handled by the linux kernel (ref #18)