mcpField
N
nerva-scan

nerva-scan

github.com/wgpsecSecurity1.8k41 installsUpdated 4d ago
Repository

About nerva-scan

nerva-scan is a service-fingerprinting skill built around the nerva CLI, for security practitioners scanning network services. It covers multi-protocol probing, metadata extraction, and pipelines with port scanners.

Key features

  1. 01Identify 120+ protocols
  2. 02Support TCP, UDP, and SCTP
  3. 03Extract service metadata
  4. 04Configure fast scans, timeouts, and concurrency
  5. 05Use JSON output and piped input

Use cases

  1. 01Identify services on one or more host ports
  2. 02Load targets from a file for batch probing
  3. 03Pass naabu or masscan results to nerva for service identification

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/wgpsec/aboutsecurity --skill nerva-scan

After installing, type/nerva-scanin Claude Code to confirm it loaded.

Details

From the project README

nerva 高性能服务指纹识别方法论

nerva 是 Praetorian 出品的服务指纹识别工具（fingerprintx 升级版）。核心优势：120+ 协议 + TCP/UDP/SCTP 多传输层 + 丰富元数据提取。

项目地址：https://github.com/praetorian-inc/nerva

Phase 1: 基本使用

# 单个目标
nerva -t 192.168.1.1:22

# 多个目标
nerva -t 192.168.1.1:22,192.168.1.1:80,192.168.1.1:3306

# 从文件读取
nerva -l targets.txt

# JSON 输出
nerva -t 192.168.1.1:22 --json

Phase 2: 扫描模式

# 快速模式（只尝试默认服务）
nerva -t 192.168.1.1:22 --fast

# UDP 探测
nerva -t 192.168.1.1:161 -U

# 设置超时和并发
nerva -t targets -w 2000 -W 50

# 限速
nerva -l targets.txt -R 100

Phase 3: 管道集成

# naabu 端口扫描 → 服务识别
naabu -host 192.168.1.0/24 -silent | nerva --json

# masscan → 服务识别
sudo masscan 10.0.0.0/24 -p 1-10000 -oL - | \
  grep "^open" | awk '{print $4":"$3}' | nerva --json -o services.json

Comments

Markdown supported