naabu-portscan

Scans hosts and network segments for open ports using naabu SYN and CONNECT scanning.

1|Updated Aug 3, 2026
One-click install
npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill naabu-portscan-hanmujun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: naabu-portscan
Source: https://github.com/hanmujun/hanmujun-agent-public/tree/main/skill-library/naabu-portscan
Command: npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill naabu-portscan-hanmujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Discovering open ports and live hosts across targets or network segments is slow with traditional scanners, and manual nmap runs do not scale to bulk targets or CIDR ranges. This Skill provides a structured methodology for high-speed port discovery with naabu and clear guidance on when to fall back to nmap. ## Core Features & Use Cases - High-Speed Port Discovery: Run SYN or CONNECT scans against single hosts, target lists, CIDR ranges, or ASNs with top-ports presets or full port ranges. - Pipeline Integration: Chain naabu with httpx and nuclei via stdin/stdout to go from port scan to HTTP probing to vulnerability scanning in one command. - High-Value Port Presets: Ready-made port lists for web services, databases, remote management, domain controllers, and middleware. - Use Case: After gaining an internal foothold, scan 10.0.0.0/24 for SSH, SMB, RDP, and database ports in seconds, then pipe live web ports to httpx for service fingerprinting. ## Quick Start Ask the AI to scan a target host or network segment for common high-value ports using naabu and show the open host:port results.

Frequently Asked Questions about naabu-portscan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a network segment for open ports quickly?▼

Use naabu with a CIDR target and a high-value port list, for example naabu -host 10.0.0.0/24 -p 22,80,135,445,3389,3306. Its SYN scanning and high concurrency make it significantly faster than nmap for bulk discovery.

naabu vs nmap: which port scanner should I use?▼

Use naabu for fast port discovery and bulk or network-segment scanning, since it is typically over 10x faster. Use nmap when you need service version detection (-sV), NSE vulnerability scripts, OS fingerprinting, or deep UDP scanning.

How do I chain naabu with httpx and nuclei in a pipeline?▼

Pipe naabu's silent output into httpx for HTTP probing, then into nuclei for vulnerability scanning: naabu -host target.com -silent | httpx -silent | nuclei. The -silent flag outputs only host:port pairs for clean piping.

Does naabu SYN scanning require root privileges?▼

Yes, SYN scanning requires root privileges. In non-root environments naabu automatically falls back to CONNECT scanning, which is slightly slower but functionally equivalent for port discovery.

Can naabu scan UDP ports and exclude CDN hosts?▼

Naabu supports UDP scanning by prefixing ports with u:, such as -p u:53,u:161. It can also exclude CDN/WAF IP ranges with -exclude-cdn and display CDN information with -display-cdn.

What are the limitations of naabu compared to nmap?▼

Naabu does not perform service version identification, OS fingerprinting, or script-based vulnerability scanning. The recommended workflow is to discover ports with naabu first, then run nmap -sV against the key open ports.