loading
Loading content
loading
Utilities
Lightweight TCP port scanner for massdns-resolved hosts.
overview
Place portboozle after massdns and before banner grabbing or HTTP probing. It reads a massdns-output file, probes the ports you set, and writes FILE and FOLDER results of open listeners.
Set --ports to a comma list (80,443), a range (1-1024), or a size preset (medium, large, huge, massive). --timeout controls socket wait in seconds (default 0.7) so high latency does not stall the run.
Prefer masscan or zmap for raw internet-scale address sweeps. Prefer naabu when you want a Go pipeline scanner without a massdns-first input shape. portboozle does not resolve names.
use cases
Take a massdns resolution file and probe common or custom TCP ports so only hosts with open listeners continue in the workflow.
Set --ports to a large range or a size preset when you need broader coverage than a short top-ports list.
Raise --timeout when high latency causes missed open ports, or lower it when you want a faster pass over a reliable link.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| massdns-output | FILE | · | Massdns output file of resolved hosts to scan. |
| ports | STRING | --ports | Target ports as a comma list, a range, or a size preset (medium, large, huge, massive). |
| timeout | STRING | --timeout | Socket timeout for port scanning (default 0.7). |
Showing key inputs. portboozle exposes 3 inputs in total.
example
# scan hosts from massdns output for common web portsportboozle --ports 80,443,8080,8443 --timeout 1.0198.51.100.10:80198.51.100.10:443198.51.100.23:443198.51.100.64:22203.0.113.15:80203.0.113.15:443203.0.113.40:8080guidance
Use portboozle for a thin TCP port stage over hosts already resolved with massdns. It does not resolve DNS. For internet-scale SYN sweeps, use masscan instead.
High-speed scanner for wide address spaces. Heavier than portboozle when you already have massdns hosts.
Fast Go port scanner with clean pipeline output. Common alternative when input is not massdns-shaped.
Quick port sweep that hands open ports to nmap for deeper inspection.
faq
related
Spider a URL and return a wordlist for password crackers.
Wordlist and mined-word subdomain permutation.
Import, export, and upsert workflow data against an Airtable base.
Decode Android APK files into smali sources and resources.
Check a file's values against conditions and exit with a matching code.
Authenticated Route53 hosted-zone inventory.
A massdns output file feeds Portboozle, which scans the resolved hosts for open ports and writes the result as a queryable output.
Facts on this page come from the live Trickest tool library.