Naabu vs Sherlock Forensics Port Scanner
Naabu
github.comSherlock Forensics Port Scanner
sherlockforensics.comSide by side
| Figure | Naabu | Sherlock Forensics Port Scanner |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 1 | 1 |
| Spec score · Port Scanner Software | 8.8 (#1) | 7.4 (#19) |
| Intended users | The README describes Naabu as designed to work with other tools for attack surface discovery in bug bounties and penetration tests. | The maker describes it as a lightweight GUI scanner for penetration testers, compliance auditors, and system administrators. |
| Purpose | Naabu is a Go port scanner that enumerates valid ports on hosts quickly and reliably. | Sherlock Forensics Port Scanner scans TCP ports, identifies open ports, grabs service banners, and maps target hosts’ attack surfaces. |
| Service detection | Naabu can identify services by port and detect service versions using Nmap service probes. | It grabs service banners from open ports to identify software and version strings. |
Plans
In their own words
Naabu
Naabu is a free, open-source command-line port scanner for identifying valid ports on hosts, with SYN, CONNECT, and UDP probes. It accepts hosts, IP addresses, CIDR ranges, and ASNs directly, from a file, or through standard input. Results can be emitted as JSON, CSV, text, or standard output. It supports IPv4 and experimental IPv6 scanning, DNS port scans, passive enumeration through Shodan InternetDB, and experimental host discovery. Naabu can work with Nmap for service discovery and version detection, and discovered ports can be piped to ProjectDiscovery's httpx to identify running HTTP servers. The CLI can upload or display scan results in the ProjectDiscovery Cloud dashboard. Installation options include ready-to-run binaries, Docker, and Go. Packet capture requires libpcap on Linux or macOS, or Npcap on Windows. Service version detection needs a local Nmap service-probe database or a custom path. The README recommends running as root for best results and adjusting scan flags and rate on local systems.
Sherlock Forensics Port Scanner
Sherlock Forensics Port Scanner is a free desktop GUI tool for identifying exposed TCP ports and the services behind them. It scans the top 1,000 TCP ports by default, accepts custom port and CIDR ranges, and can scan all 65,535 TCP ports. For open ports, it retrieves service banners to identify software and version strings. Scans use TCP connect with the full three-way handshake; SYN scans are not supported. Results export to CSV with timestamps, target host, port, protocol, state and service identification. Each export includes an Ed25519-signed sidecar with the CSV’s SHA-256, signature, per-installation public key and UTC timestamp. The scanner identifies ports and services but does not check results against CVE databases or attempt exploitation. It runs on Windows and Linux. Version 0.1.7 supports 64-bit Windows 10/11 as a single executable without installation dependencies or elevated privileges; the native Linux x64 binary requires libgtk-3, libfontconfig1 and libxkbcommon. The free plan has no trial period, feature restrictions or expiry.