loading
Loading content
loading
Utilities
Lightweight TCP port scanner for massdns-resolved hosts.
overview
Place portboozle after massdns and before banner grabbing or HTTP probing. It reads a massdns-output file, probes the ports you set, and writes FILE and FOLDER results of open listeners.
Set --ports to a comma list (80,443), a range (1-1024), or a size preset (medium, large, huge, massive). --timeout controls socket wait in seconds (default 0.7) so high latency does not stall the run.
Prefer masscan or zmap for raw internet-scale address sweeps. Prefer naabu when you want a Go pipeline scanner without a massdns-first input shape. portboozle does not resolve names.
use cases
Take a massdns resolution file and probe common or custom TCP ports so only hosts with open listeners continue in the workflow.
Set --ports to a large range or a size preset when you need broader coverage than a short top-ports list.
Raise --timeout when high latency causes missed open ports, or lower it when you want a faster pass over a reliable link.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| massdns-output | FILE | · | Massdns output file of resolved hosts to scan. |
| ports | STRING | --ports | Target ports as a comma list, a range, or a size preset (medium, large, huge, massive). |
| timeout | STRING | --timeout | Socket timeout for port scanning (default 0.7). |
Showing key inputs. portboozle exposes 3 inputs in total.
example
# scan hosts from massdns output for common web portsportboozle --ports 80,443,8080,8443 --timeout 1.0198.51.100.10:80198.51.100.10:443198.51.100.23:443198.51.100.64:22203.0.113.15:80203.0.113.15:443203.0.113.40:8080guidance
Use portboozle for a thin TCP port stage over hosts already resolved with massdns. It does not resolve DNS. For internet-scale SYN sweeps, use masscan instead.
High-speed scanner for wide address spaces. Heavier than portboozle when you already have massdns hosts.
Fast Go port scanner with clean pipeline output. Common alternative when input is not massdns-shaped.
Quick port sweep that hands open ports to nmap for deeper inspection.
faq
related
Spider a URL and return a wordlist for password crackers.
Wordlist and mined-word subdomain permutation.
CSS selectors over HTML, the jq counterpart for markup.
Extract chosen URL parts from stdin into clean line lists.
Import, export, and upsert workflow data against an Airtable base.
Decode Android APK files into smali sources and resources.
A massdns output file feeds Portboozle, which scans the resolved hosts for open ports and writes the result as a queryable output.
Facts on this page come from the live Trickest tool library.