- Home
- Port Scanner Software
- portwave
On the recordRead 8 Oct 202621 facts
portwave
On the record
- DNS and CDN handling
- It resolves domains in parallel, filters wildcard DNS, and skips known CDN edge IPs by default, with options to enrich hostnames or scan CDN edges.github.com · read 8 Oct 2026
- Enrichment
- The pipeline includes banner grabbing, TLS inspection, native HTTP(S) probing, certificate SAN and issuer extraction, and nuclei scans of confirmed HTTP targets.github.com · read 8 Oct 2026
- Inputs
- It accepts IPs, CIDRs, ranges, domains, and ASNs, including mixed target types.github.com · read 8 Oct 2026
- Installation
- The maker provides install instructions for Linux and macOS and for Windows, plus commands to update, check for updates, and uninstall.github.com · read 8 Oct 2026
- Integrations
- The README documents piping subfinder output into portwave and using ProjectDiscovery nuclei for vulnerability scanning when installed.github.com · read 8 Oct 2026
- Intended use
- The maker describes portwave as a security-research tool and says to scan only systems owned by the user or covered by written permission.github.com · read 8 Oct 2026
- IPv6 limits
- Scopes larger than 2²⁰ hosts are refused unless an override is used; --smart-ipv6 can sample likely addresses in large ranges.github.com · read 8 Oct 2026
- IPv6 scope
- Scopes larger than 2²⁰ hosts are refused unless an override is used; smart IPv6 mode samples likely addresses for large ranges.github.com · read 8 Oct 2026
- License
- The repository identifies the software as MIT licensed.github.com · read 8 Oct 2026
- License and support
- The repository identifies the project as MIT licensed and directs users to GitHub issues and pull requests.github.com · read 8 Oct 2026
- Limitations
- Portwave uses TCP connect scans without raw sockets or root, does not fingerprint service versions beyond protocol classification, and has no IDS evasion or ICMP discovery preflight.github.com · read 8 Oct 2026
- Outputs
- It writes scan results, HTTP enrichment, SSL findings, summaries, and run-to-run port differences to files.github.com · read 8 Oct 2026
- Purpose
- Portwave is an IPv4/IPv6 port scanner with HTTP(S) enrichment, SSL reconnaissance, and a nuclei pipeline.github.com · read 8 Oct 2026
- Rate controls
- Scans can be constrained by packet rate and maximum scan time, and small scopes pace simultaneous probes per host.github.com · read 8 Oct 2026
- Results
- Scan outputs include open-port evidence, HTTP enrichment, SSL findings, nuclei findings, summaries, and scan diffs.github.com · read 8 Oct 2026
- Scanning
- It uses adaptive TCP connect scanning and can scan all 65,535 TCP ports when explicitly requested.github.com · read 8 Oct 2026
- Scope limits
- A bare scan uses a curated port list; scanning all 65535 TCP ports requires the explicit --all-ports option.github.com · read 8 Oct 2026
- Security behavior
- The README says bundled OpenSSL accepts self-signed, expired, hostname-mismatched, and malformed certificates so the scanner can inspect responses.github.com · read 8 Oct 2026
