Documentation Index
Fetch the complete documentation index at: https://mintlify.com/GhostTroops/scan4all/llms.txt
Use this file to discover all available pages before exploring further.
Overview
scan4all provides flexible port selection options, from scanning specific ports to using predefined port lists.Default Behavior
Without any port specification, scan4all scans common HTTP ports:- 80-99, 443, 888, 1025-1030, 2000, 2001, 2375, 2379
- 4433, 5000, 5001, 5432, 6379, 6443, 7000-7010
- 8000-8010, 8080-8100, 8443, 8888, 9000-9010, 9443
- And many more common web service ports
Specific Ports
Single Port
Scan a single port:Multiple Ports
Scan specific ports separated by commas:Port Ranges
Scan a range of ports:Combined Syntax
Mix individual ports and ranges:Top Ports
scan4all includes several predefined port lists based on Nmap’s research:- HTTP Ports (Default)
- Top 100
- Top 1000
- Full Port Scan
Common HTTP and web service ports:Includes approximately 100 common web service ports.
Port Files
Specify ports from a file for complex or reusable configurations:Port File Format
Create a file with one port or port range per line:ports.txt
ports.txt
Excluding Ports
Exclude Specific Ports
Scan a range but exclude specific ports:Exclude from File
Exclude ports listed in a file:Port exclusion is useful for:
- Avoiding honeypots or monitored services
- Skipping ports you’ve already tested
- Complying with security policies
All Ports Shorthand
Scan all 65,535 ports using the shorthand- syntax:
CDN Port Optimization
When scanning domains that use CDNs, limit port scans to common HTTP ports:With
-ec enabled:- CDN IPs are detected automatically
- Only ports 80 and 443 are scanned on CDN hosts
- Reduces noise and improves scan efficiency
Practical Examples
Performance Considerations
Start Narrow
Begin with top 100 or specific ports, then expand if needed
Balance Speed vs Coverage
More ports = longer scan time. Choose based on your objectives
Use Rate Limiting
Adjust
-rate for large port ranges to avoid network issuesConsider CDN Detection
Use
-ec to optimize scans for CDN-protected targetsPort Selection Cheat Sheet
| Goal | Command |
|---|---|
| Default HTTP ports | scan4all -host target |
| Specific ports | scan4all -host target -p 80,443 |
| Port range | scan4all -host target -p 1-1000 |
| Top 100 ports | scan4all -host target -tp 100 |
| Top 1000 ports | scan4all -host target -tp 1000 |
| All ports | scan4all -host target -p - |
| HTTP ports only | scan4all -host target -tp http |
| Exclude ports | scan4all -host target -p 1-100 -ep 22,23 |
Next Steps
Output Formats
Learn how to save scan results
Advanced Options
Explore advanced scanning features