# Install naabu with Homebrew, apk, Nix

Fast port scanner. Version 2.6.1 via Homebrew; verified 2026-07-26. Also installable with nix: nix profile install nixpkgs#naabu.

## Install

```sh
sudo av install brew:naabu
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install naabu
```

  Evidence: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add naabu
```

  Evidence: Alpine Linux edge package indexes: naabu from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#naabu
```

  Evidence: nixpkgs package indexes: pkgs/by-name/na/naabu/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:naabu
- **Package manager:** Homebrew
- **Version:** 2.6.1
- **Source summary:** Fast port scanner
- **Homepage:** <https://docs.projectdiscovery.io/tools/naabu/overview>
- **Repository:** <https://github.com/projectdiscovery/naabu>
- **Last updated:** 2026-07-26T19:43:12+02:00
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- naabu (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 2.6.1
## Project history and usage

Naabu is ProjectDiscovery's fast Go port scanner for enumerating open ports across hosts, lists, CIDRs, and discovery pipelines. The GitHub repository was created on January 21, 2020, and the project sits in the same offensive-security and attack-surface-discovery family as subfinder, httpx, nuclei, dnsx, and other ProjectDiscovery tools.

### Project history

The README and ProjectDiscovery docs describe Naabu as a simple scanner that performs SYN, CONNECT, and UDP probes and returns ports that respond. Over time it gained features useful in large recon jobs: IPv4/IPv6 scanning, DNS port scans, automatic IP deduplication, host discovery, CDN/WAF exclusion, JSON/CSV output, passive port enumeration through Shodan InternetDB, native UDP service probes, and nmap integration for follow-up service discovery.

### Adoption history

Naabu is adopted mostly by bug bounty hunters, pentesters, and security engineers who already compose ProjectDiscovery tools into pipelines. On July 1, 2026 the GitHub API showed 6,029 stars and 691 forks. Homebrew reported 1,696 installs over 365 days, which is meaningful but modest beside Go install paths, container usage, and Linux package channels.

### How it is used

The basic use is `naabu -host example.com` or feeding hosts on stdin with flags such as `-p`, `-top-ports`, `-json`, `-o`, and `-rate`. Operators use it as the port-enumeration stage between subdomain discovery and HTTP/service probing, often handing discovered ports to httpx, nuclei, or nmap. The docs call out that SYN scans need sufficient privileges, while non-root use falls back to CONNECT scans.

### Why package nerds care

Naabu is not trying to replace nmap as a universal network mapper. Its niche is fast, scriptable port discovery that produces clean output for the next tool in a recon pipeline. That separation of concerns is the package-nerd angle: use Naabu for speed and breadth, then hand fewer targets to slower service/version or vulnerability scanners.

### Timeline

- 2020-01-21: GitHub repository created.
- 2026-05-05: v2.6.1 published on GitHub.
- 2026-07-01: GitHub API showed 6,029 stars and Homebrew API showed 1,696 installs over 365 days.

### Related projects

- ProjectDiscovery
- nuclei
- httpx
- subfinder
- dnsx
- nmap
- Shodan InternetDB

### Sources

- <https://api.github.com/repos/projectdiscovery/naabu>
- <https://api.github.com/repos/projectdiscovery/naabu/releases/latest>
- <https://docs.projectdiscovery.io/opensource/naabu/overview>
- <https://docs.projectdiscovery.io/opensource/naabu/running>
- <https://formulae.brew.sh/api/formula/naabu.json>
- <https://formulae.brew.sh/formula/naabu>
- <https://github.com/projectdiscovery/naabu>
- <https://pkg.go.dev/github.com/projectdiscovery/naabu>


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.config/naabu/config.yaml
## Other Package-Manager Records

- Nix - naabu: normalized package name match | nixpkgs package indexes: pkgs/by-name/na/naabu/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - naabu - 2.5.0-r3: normalized package name match | Alpine Linux edge package indexes: naabu from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Fast port scanner written in go with a focus on reliability and simplicity | https://docs.projectdiscovery.io/tools/naabu
- apk - naabu-doc - 2.5.0-r3: normalized package name match | Alpine Linux edge package indexes: naabu-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Fast port scanner written in go with a focus on reliability and simplicity (documentation) | https://docs.projectdiscovery.io/tools/naabu


## Combined YAML source

View the package source record on GitHub. [combined/naabu.yml](https://github.com/mxcl/pkgdb/blob/main/combined/naabu.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
