内観

Naiscan CLI 内観

The hosted app does safe, passive detection. The command-line tool does everything the web app does plus the operator-only features — port scanning, content discovery, origin discovery, authenticated scanning, live WPScan/NVD feeds, and lockfile analysis. Run it from infrastructure you control, against targets you're authorized to test.

1 · Requirements

Option A installs Python for you if it's missing — nothing to set up first.
For Option B you need Python 3.11+ already (python --version).
Network access from the machine running the scan.

2 · Download & install

No GitHub access needed — everything installs straight from this site.

Option A — one-line installer checks & installs Python for you

Installs Python if it's missing, then Naiscan. (Review the script first if you like: install.ps1 · install.sh. May prompt for admin/password.)

# Windows (PowerShell)
irm https://scanner.globusgroup.com/install.ps1 | iex

# macOS / Linux
curl -fsSL https://scanner.globusgroup.com/install.sh | sh

Option B — already have Python 3.11+?

Install directly from the hosted package (pulls its dependencies automatically):

pip install https://scanner.globusgroup.com/naiscan.zip

3 · Quick start

# a bare domain is fine — https:// is added for you
naiscan example.com

# skip the authorization prompt in your own lab / CI
naiscan example.com --yes

# write an HTML or Markdown report
naiscan example.com --format html --out report.html
naiscan example.com --format md   --out report.md

Exit code is 1 when a version-confirmed CVE is found (handy for CI gates), 0 otherwise.

4 · Output formats

`--format text`	Human-readable (default)
`--format json`	Machine-readable for pipelines
`--format html`	Self-contained HTML report
`--format md`	Markdown for tickets / PRs
`--out FILE`	Write to a file instead of stdout

5 · Deeper, operator-only options not on the hosted app

These are more active or need secrets, so they live only in the CLI.

# exact-version check from a lockfile (OSV) — the most accurate option
naiscan --lockfile composer.lock
naiscan --lockfile package-lock.json --format json --out sca.json

# port scan (common ports, or a list)
naiscan example.com --ports
naiscan example.com --ports 80,443,8080

# content / directory discovery (Gobuster-style)
naiscan example.com --content-discovery --extensions php,bak,zip

# find the real origin behind a CDN/WAF, then scan it
naiscan example.com --find-origin
naiscan example.com --via-origin

# authenticated scan of your own app
naiscan app.example.com --cookie "session=abc; csrf=xyz"
naiscan api.example.com --bearer eyJhbGciOi... -H "X-Tenant: acme"

# live CVE feeds (WPScan needs a free token)
export WPSCAN_API_TOKEN=xxxxx
naiscan blog.example.com --live --nvd

6 · See every option

naiscan --help

Only scan systems you own or have explicit written authorization to test. Port scanning, content discovery, origin discovery and authenticated scanning are deliberately CLI-only — keep credentials and aggressive options off any shared service.