naabu

No entries match these filters. Clear filters

1. v2.7.0 Oct 28, 2026 · issue 123

   naabu v2.7.0 adds native service fingerprinting, -uP UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. probes, dead host reporting, and faster scanning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.7.0 https://github.com/projectdiscovery/naabu.git
   # already have the repo? check out this version:
   $ git checkout v2.7.0

   └──▷ TRY IT
   Fingerprint services on the top 1000 ports of a target, using the embedded nmap probes and limiting workers for a controlled scan.
   copy

   $ naabu -host example.com -top-ports 1000 -sV -sV-workers 10 -sV-timeout 10s -json -o results.json

   Run a UDP scan with protocol-specific payloads to identify UDP services on common ports.
   copy

   $ naabu -host 192.168.1.0/24 -p 53,161,500,4500 -s SYN -uP -json

   Discover live hosts in a CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. and surface dead hosts that did not respond, useful for asset inventory gaps.
   copy

   $ naabu -host 10.0.0.0/24 -sn -show-dead -silent

   • Adds -sV / -service-version flag for native service version detection using embedded nmap-service-probes, with -sV-fast to probe only port-hinted services, -sV-timeout to control probe timeout, -sV-workers for concurrency, and -sV-probes to supply a custom nmap-service-probes file path.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds -uP / -udp-probes flag to send protocol-specific payloads on UDP scans using nmap-service-probes.
   • Adds -show-dead flag to report hosts that did not respond during host discovery (requires host discovery to be enabled).
   • Adds -sV-fast mode that skips fallback probes and only targets port-hinted services for faster fingerprinting.
   • Delivers faster scanning performance via internal optimizations.

   +1 more show less

   • Adds musl release archives for Alpine Linux.
   • Adds -sV / -service-version flag for native service version detection using embedded nmap-service-probes, with -sV-fast to probe only port-hinted services, -sV-timeout to control probe timeout, -sV-workers for concurrency, and -sV-probes to supply a custom nmap-service-probes file path.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds -uP / -udp-probes flag to send protocol-specific payloads on UDP scans using nmap-service-probes.
   • Adds -show-dead flag to report hosts that did not respond during host discovery (requires host discovery to be enabled).
   • Adds musl release archives for Alpine Linux.

   2 more in Everything

2. v2.6.0 Apr 23, 2026 · release notes

   Naabu v2.6.0 adds predictive scanning, Windows SYN scan via npcap, SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. DNS resolution, and goes CGo-free.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.6.0 https://github.com/projectdiscovery/naabu.git
   # already have the repo? check out this version:
   $ git checkout v2.6.0

   └──▷ TRY IT
   Route all DNS queries through a SOCKS5 proxy during a scan — useful when targeting internal hosts only reachable via a jump proxy.
   copy

   $ naabu -host 10.10.10.0/24 -proxy socks5://127.0.0.1:1080 -dns-order pl

   Run a SYN scan on Windows (requires npcap installed) to get accurate port results without relying on connect-scan fallbacks.
   copy

   $ naabu -host 192.168.1.0/24 -s syn -p 80,443,8080,8443

   • Adds predictive scanning to anticipate and prioritize likely open ports during discovery.
   • Enables SYN scan support on Windows via npcap, bringing raw-packet scanning to Windows hosts.
   • Supports DNS resolution over SOCKS5 proxies, keeping all traffic — including DNS — through the proxy.
   • Adds configurable DNS resolution order via -dns-order flag, controlling whether DNS queries go to local resolvers, the proxy, or both in a specified sequence.
   • Goes CGo-free, enabling simpler cross-compilation and deployment without C toolchain dependencies.

   5 details in Everything

3. v2.5.0 Mar 9, 2026 · release notes

   Naabu v2.5.0 adds CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently. data to Nmap service detection output.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.5.0 https://github.com/projectdiscovery/naabu.git
   # already have the repo? check out this version:
   $ git checkout v2.5.0

   • Adds CPE (Common Platform Enumeration) field to service detection results when using Nmap integration, enabling richer asset fingerprinting.

   1 detail in Everything

4. v2.4.0 Jan 21, 2026 · release notes

   Naabu v2.4.0 enables IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. by default and adds a DisableStdout SDK option for cleaner programmatic use.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.4.0 https://github.com/projectdiscovery/naabu.git
   # already have the repo? check out this version:
   $ git checkout v2.4.0

   └──▷ USE IT
   Suppress naabu's stdout when using it as a Go library — useful when integrating into a pipeline that owns its own output formatting.
   go copy

   opts := &naabu.Options{
       DisableStdout: true,
       // other options...
   }

   • Enables IPv6 scanning by default, broadening host coverage without extra flags.
   • Adds DisableStdout option to the Go SDK to suppress stdout output when embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. naabu programmatically.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !IPv6 is now the default scan mode; workflows that relied on IPv4-only behavior may produce different results or require explicit configuration to restrict scans to IPv4.
5. v2.3.6 Nov 14, 2025 · release notes

   Naabu v2.3.6 adds MAC addressMAC addressA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. output, file-based port lists, UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. payload support, and custom asset IDs.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.3.6 https://github.com/projectdiscovery/naabu.git
   # already have the repo? check out this version:
   $ git checkout v2.3.6

   └──▷ TRY IT
   Include MAC addressesMAC addressesA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. in JSON output to correlate open ports with hardware identifiers on a local network segment.
   copy

   $ naabu -host 10.0.0.0/24 -json | jq '{ip: .ip, mac: .mac, port: .port}'

   • Adds MAC address support to scan output, surfacing hardware-layer host identity alongside IP results.
   • Supports reading port lists from a file, enabling reusable and shareable port scope definitions.
   • Adds UDP payload support, enabling active probing of UDP services during port scanning.
   • Allows specifying a custom asset ID to tag scan results for integration with asset management workflows.

   4 details in Everything

6. v2.3.5 Jul 14, 2025 · release notes

   naabu v2.3.5 adds network policy support, dynamic result filtering, and ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. binary builds.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.3.5 https://github.com/projectdiscovery/naabu.git
   # already have the repo? check out this version:
   $ git checkout v2.3.5

   • Adds dynamic result filtering to refine port scan output on the fly.
   • Adds pre-built binary for ARM architectures.

   2 details in Everything

7. v2.3.4 Jan 25, 2025 · release notes

   naabu v2.3.4 adds human-readable timeout formats and FreeBSD build support.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.3.4 https://github.com/projectdiscovery/naabu.git
   # already have the repo? check out this version:
   $ git checkout v2.3.4

   └──▷ TRY IT
   Use millisecond-precision timeouts when scanning behind a slow proxy or tuning fast internal scans.
   copy

   $ naabu -host 10.0.0.0/24 -timeout 250ms

   • Supports human-readable time formats for the timeout flag (e.g., 5s, 100ms, 1m) instead of bare integers.
   • Adds build support for FreeBSD.

   2 details in Everything

8. v2.3.2 Oct 30, 2024 · release notes

   naabu v2.3.2 adds confidence-level reporting for IPs skipped due to threshold limits

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.3.2 https://github.com/projectdiscovery/naabu.git
   # already have the repo? check out this version:
   $ git checkout v2.3.2

   • Adds a confidence level indicator for IPs skipped because the host discovery threshold was exceeded, giving clearer signal on scan coverage gaps.

   1 detail in Everything

9. v2.3.0 Mar 13, 2024 · release notes

   Adds -config flag for custom config paths and --display runtime output

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.3.0 https://github.com/projectdiscovery/naabu.git
   # already have the repo? check out this version:
   $ git checkout v2.3.0

   └──▷ USE IT
   Point naabu to a custom configuration directory during execution.
   shell copy

   naabu -config /path/to/custom/config.yaml -host example.com

   • -config string allows specifying a path to the naabu configuration file instead of the default $HOME/.config/naabu/config.yaml

   1 detail in Everything

10. v2.2.0 Nov 28, 2023 · release notes

    Adds additional probes for host discovery to improve scan reliability

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.2.0 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.2.0

11. v2.1.7 Aug 19, 2023 · release notes

    Naabu v2.1.7 adds [host|ip]:port input format and privileged open port details

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.1.7 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.1.7

    └──▷ USE IT
    Scan a specific port on a host directly without needing a text file list
    shell copy

    echo google.com:443 | ./naabu -silent

    Force scanning port 80 on an IP that might otherwise be skipped or scanned differently
    shell copy

    echo 142.250.183.174:443 | ./naabu -silent -p 80

    • -p flag now works with [host|ip]:port input (e.g., echo google.com:443 | naabu -silent) to target specific ports directly
    • Privileged scans now include the open_ports field in JSON output listing detected open ports

    2 details in Everything

12. v2.1.3 Mar 17, 2023 · release notes

    Adds self-update and version-check capabilities via naabu -update.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.1.3 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.1.3

    • Adds the -update flag to enable automatic binary updates and version checks.

    1 detail in Everything

13. v2.1.2 Feb 25, 2023 · release notes

    naabu v2.1.2 adds UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. port scanning, proxy support for connect scans, and optional reverse PTR resolution.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.1.2 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.1.2

    └──▷ TRY IT
    Run a connect scan through a proxy server.
    copy

    $ naabu --proxy socks5://127.0.0.1:9050 -host example.com

    Perform a scan and resolve hostnames for open ports.
    copy

    $ naabu -ptr -host example.com

    • Adds --proxy flag to route connect scans through a SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. or HTTP proxy
    • Adds -ptr option to enable optional reverse DNS lookups on discovered ports

    2 details in Everything

14. v2.1.1 Oct 25, 2022 · release notes

    Adds ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses. input support and host exclusion via open port threshold in naabu v2.1.1

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.1.1 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.1.1

    └──▷ USE IT
    Scan all IP addresses associated with a specific Autonomous System number.
    shell copy

    echo AS15133 | naabu

    • Added -pts flag to exclude hosts with fewer than N open ports
    • Added ASN input support to scan all IPs in a given Autonomous System number

    2 details in Everything

15. v2.0.8 Jul 22, 2022 · release notes

    Naabu v2.0.8 adds host discovery, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. scanning, source port selection, and health-check flag

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.0.8 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.0.8

    • host-discovery support for network mapping before port scanning
    • IPv6 port scan support for modern networks
    • IP Version selection via --ip-version flag
    • nmap integration in passive scan mode for richer data collection
    • health-check flag for monitoring tool stability during long scans

    +1 more show less

    • CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server. information included in output for filtering and context

    6 details in Everything

16. v2.0.7 May 10, 2022 · release notes

    Naabu v2.0.7 adds passive port enumeration via Shodan InternetDB API using the -passive flag

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.0.7 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.0.7

    └──▷ USE IT
    Perform passive scanning against a target using Shodan's data instead of active network probes.
    shell copy

    naabu -passive -host example.com

17. v2.0.6 Mar 31, 2022 · release notes

    Naabu v2.0.6 adds CSV output, resume scans, stream mode input, SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support, and more.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.0.6 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.0.6

    └──▷ TRY IT
    Continue a scan that was previously interrupted by providing the state file from the -resume flag.
    copy

    $ naabu -l targets.txt --resume resume.state

    Pipe a list of hosts directly into naabu for stream processing.
    copy

    $ cat hosts.txt | naabu -stream

    • Adds CSV output format via -o csv flag
    • Adds --resume flag to resume paused or interrupted scans using a state file
    • Adds stream mode input support allowing hosts to be piped into naabu via stdin
    • Adds SOCKS5 proxy support via the -proxy flag
    • Adds comma-separated host input, allowing multiple IPs/domains in a single target argument

    +2 more show less

    • Adds customizable stats interval via the -si flag
    • Adds timestamp field to JSON output for better auditability

    7 details in Everything

18. v2.0.5 Oct 12, 2021 · release notes

    Adds custom-resolvers input and goflags integration for extensible configuration

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.0.5 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.0.5

    └──▷ USE IT
    Use a private DNS infrastructure for internal asset discovery without leaking queries to public DNS.
    shell copy

    naabu --host example.com --custom-resolvers ./my-resolvers.txt

    • Adds --custom-resolvers flag to accept a file of custom DNS resolvers for port scanning

    1 detail in Everything

19. v2.0.3 Dec 12, 2020 · release notes

    Naabu v2.0.3 adds scan type selection (-s), multiple IP scanning (-scan-all-ips), stats (-stats), and direct nmap integration (-nmap-cli).

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.0.3 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.0.3

    └──▷ USE IT
    Perform a TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. connect scan instead of the default SYN scan against target hosts.
    shell copy

    naabu -s CONNECT -host example.com

    Scan all resolved IP addresses for a hostname, useful when you need to cover all aliases.
    shell copy

    naabu -scan-all-ips example.com

    Pipe Naabu's IP output directly into nmap for further service enumeration without intermediate files.
    shell copy

    naabu -host example.com | xargs -I{} nmap -Pn {}

    • Adds -s flag to select scan type (SYN, CONNECT)
    • Adds -scan-all-ips flag to scan multiple IPs of the same host
    • Adds -stats flag to enable statistics output
    • Adds -nmap-cli flag to run nmap directly on Naabu's output

    4 details in Everything

20. v2.0.2 Sep 23, 2020 · release notes

    Naabu v2.0.2 adds native Nmap support, config file parsing, rate limiting, interface selection, and CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server. exclusion.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.0.2 https://github.com/projectdiscovery/naabu.git
    # already have the repo? check out this version:
    $ git checkout v2.0.2

    └──▷ TRY IT
    Use Nmap as the backend scanner for compatibility with specific nmap scripts or behaviors.
    copy

    $ naabu --host example.com --nmap

    Limit scan speed to 1000 packets per second to avoid triggering rate limits on target infrastructure.
    copy

    $ naabu --host example.com -rate 1000

    Exclude CDN ranges from scanning to focus only on origin infrastructure.
    copy

    $ naabu --host example.com -exclude-cdn

    • Adds --nmap flag to run Nmap as the scanning engine instead of the default engine
    • Adds a new config file format for persistent settings (no specific path named, but supported)
    • Adds rate limit control via packet count per second configuration
    • Adds network interface selection support to choose which NICNICA network interface card or adapter, the hardware that connects a computer to a network. It sends and receives packets over the link. is used for scanning
    • Adds ability to exclude CDN IPs during full port scans

    +1 more show less

    • Updates output format to include subdomain and IP information in JSON payloads

    6 details in Everything