CmdID

CmdID / Commands

naabu

A fast port scanner written in Go with a focus on reliability and simplicity. tldr-pages

On several platforms 2 Sigma rules name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

A fast port scanner written in Go with a focus on reliability and simplicity. Note: Some features are only activated when naabu is run with root privileges such as SYN scan.

Run a SYN scan against default (top 100) ports of remote host

sudo naabu -host hostIdentify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

Display available network interfaces and public IP address of the local host

naabu -interface-listIdentify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

Scan all ports of the remote host (CONNECT scan without sudo)

naabu -port - -host hostIdentify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

Scan the top 1000 ports of the remote host

naabu -top-ports 1000 -host hostIdentify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

Scan TCP ports 80, 443, and UDP port 53 of the remote host

naabu -port 80,443,u:53 -host hostIdentify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

Show CDN type the remote host is using, if any

naabu -port 80,443 -cdn -host hostIdentify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

Run nmap from naabu for additional functionalities (nmap must be installed)

sudo naabu -verbose -host host -nmap-cli 'nmap -v -T5 -sC'Identify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

What detects it

Sigma process creation rules that name naabu
highLinux HackTool ExecutionNasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])
lowLinux Network Service Scanning Tools ExecutionAlejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])