Naabu vs ZMap
Naabu
github.comZMap
zmap.ioSide by side
| Figure | Naabu | ZMap |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | — |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · Port Scanner Software | 8.8 (#1) | 6.8 (#26) |
| Installation | The maker provides ready-to-run binaries, Docker installation, and Go installation. | The project documents installation through package managers or from source, including Debian or Ubuntu packages and macOS Homebrew or MacPorts. |
| Intended users | The README describes Naabu as designed to work with other tools for attack surface discovery in bug bounties and penetration tests. | The project describes ZMap as a tool for Internet-wide network surveys and lists research among the repository topics. |
| Purpose | Naabu is a Go port scanner that enumerates valid ports on hosts quickly and reliably. | ZMap is a fast, stateless, single-packet network scanner designed for Internet-wide network surveys. |
| Support | The repository links to the ProjectDiscovery Discord community. | The README directs users to its FAQ and GitHub Discussions for questions, and asks users not to open issues for usage or support questions. |
Plans
In their own words
Naabu
Naabu is a free, open-source command-line port scanner for identifying valid ports on hosts, with SYN, CONNECT, and UDP probes. It accepts hosts, IP addresses, CIDR ranges, and ASNs directly, from a file, or through standard input. Results can be emitted as JSON, CSV, text, or standard output. It supports IPv4 and experimental IPv6 scanning, DNS port scans, passive enumeration through Shodan InternetDB, and experimental host discovery. Naabu can work with Nmap for service discovery and version detection, and discovered ports can be piped to ProjectDiscovery's httpx to identify running HTTP servers. The CLI can upload or display scan results in the ProjectDiscovery Cloud dashboard. Installation options include ready-to-run binaries, Docker, and Go. Packet capture requires libpcap on Linux or macOS, or Npcap on Windows. Service version detection needs a local Nmap service-probe database or a custom path. The README recommends running as root for best results and adjusting scan flags and rate on local systems.