Updated Jul 14, 2026

Network

Turn a CIDR block into scannable IP addresses

Expand one CIDR into one IP per line.

Agent

overview

What decant does

Between a CIDR source and a host-consuming scanner, Decant is the managed Network node that takes a single cidr-address and writes FILE plus FOLDER outputs of expanded hosts.

Reach for it when a port scanner wants concrete addresses and you only have network notation for one block. Pipe the range on stdin, or set cidr-address on the node.

For a file of many ranges, use decant-file. For aggregation or slicing instead of full expansion, mapcidr. Decant only flattens one CIDR.

source github.com/Cgboal/Decant

use cases

Where decant fits

Turn a CIDR into scannable hosts

Expand a range like 198.51.100.0/24 into individual IPs so a port scanner or prober can work from a flat host list instead of network notation.

Feed a port scanner

Hand the expanded addresses to naabu, masscan, or rustscan, which want concrete hosts and let you sweep an IP range for open ports.

Normalize recon inputs

Convert mixed range and host inputs into a uniform IP list early in a workflow so every downstream node reads the same one-IP-per-line format.

Bridge cloud-range discovery

Expand a provider's published CIDR block into addresses to enumerate and probe the hosts living inside it.

reference

decant inputs and flags

1 inputs
NameTypeFlagDescription
cidr-addressSTRING·CIDR block to expand into individual IP addresses, for example 192.168.0.0/24.

Showing key inputs. decant exposes 1 inputs in total.

example

Run decant

decant · command
# expand a /24 into 256 host addresses, one per lineecho 198.51.100.0/24 | decant > hosts.txt
sample output
198.51.100.0198.51.100.1198.51.100.2198.51.100.3198.51.100.4198.51.100.5198.51.100.6198.51.100.7…  (256 addresses for a /24 block)

guidance

Choosing decant

Use Decant when you have one CIDR and need a flat IP list for the next stage. For a file of many ranges, use decant-file. For CIDR math and aggregation rather than full expansion, mapcidr.

decant-file

Same expansion from a file of CIDR ranges instead of one address.

mapcidr

Aggregation, slicing, and expansion when you need more than a flat list.

prips

Prints each IP in a range. Comparable range-to-host primitive.

faq

decant questions

Pipe the range over stdin, for example `echo 198.51.100.0/24 | decant`. On Trickest, set the node's cidr-address input. Output is one IP per line.

Run decant yourself

A CIDR range feeds Decant, which expands it into individual IPs and passes them to naabu so the open ports land as a queryable output.

Facts on this page come from the live Trickest tool library.