About this episode

This episode explores various tools for scanning the Internet, focusing on network edge devices and their functionalities.

In this segment, we will explore some pretty awesome tools for scanning the Internet, with a focus on network edge devices. We'll bring it all together with Claude Code and look at some sample results. Tools include: Shodan | Passive recon — query existing scan data for exposed devices, services, and vulns | Passive (API) | Instant (no packets sent) ZMap | Host discovery — find live hosts with open ports | L4 (TCP SYN, UDP, ICMP) | Millions of packets/sec ZGrab2 | Application-layer handshakes — grab banners, certs, headers | L7 (30+ protocol modules) | Thousands of hosts/sec Nerva | Service fingerprinting — identify 140+ protocols with metadata, CPEs, technology stacks | L7 (TCP, UDP, SCTP) | Fast, concurrent Nuclei | Template-based vulnerability scanning — default creds, exposed panels, known CVEs | L7 (HTTP, network) | Hundreds of targets/min Shannon | Vulnerability exploitation — AI-powered whitebox pentesting of web apps | Application | ~1-1.5 hrs per target edgescan.py | Automated pipeline — orchestrates all tools above into a single command | Orchestration | End-to-end Show Notes: https://securityweekly.com/psw-919

People in this episode

Host: Paul Asadoorian

Topics covered

• network scanning
• Linux tools
• vulnerability scanning
• network edge devices
• application-layer handshakes
• service fingerprinting

Keywords

• scanning tools
• network devices
• vulnerability exploitation
• passive recon
• host discovery
• service fingerprinting
• automated pipeline

Mentioned in this episode

Organizations: Shodan, ZMap, ZGrab2, Nerva, Nuclei, Shannon, edgescan.py

More episodes of Paul's Security Weekly (Video)

• Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923 · April 23, 2026 · 2h 4m
• The AI "Vulnpocolypse" Is Real? - PSW #922 · April 16, 2026 · 2h 5m
• AI Makes All Bug Shallow? - PSW #921 · April 9, 2026 · 2h 5m
• What Is A Router? (And all things AI) - PSW #920 · April 2, 2026 · 2h 6m
• Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918 · March 19, 2026 · 2h 11m
• Vulnerability Mis-Management - PSW #917 · March 12, 2026 · 2h 3m

Explore listener stats, chart rankings, contacts and more on the Paul's Security Weekly (Video) podcast page.