Scanning The Internet with Linux Tools - PSW #919

·1 hr 3 min·5 clips

Paul reveals how he used Claude Code to tie together Shodan, ZMap, and Nuclei into an automated vulnerability discovery pipeline.

Paul Asadoorian hosts episode 919 of Paul's Security Weekly, recorded on March 4, 2026. He introduces a technical segment focused on scanning the internet using Linux command-line tools, enhanced with Claude Code AI. Paul explains he selected tools like Shodan's new CLI, ZMap for fast host discovery, ZGrab2 and the newer Nerva from Praetorian for service fingerprinting, and Nuclei for vulnerability scanning. He details how he prompted Claude Code to read documentation and create a Python script named 'EdgeScan' that ties these tools together into a pipeline. The pipeline can take target ranges, run scans, perform service fingerprinting, and execute vulnerability checks, outputting JSON and human-readable markdown reports. Paul ran it against his local network, where it found an information disclosure vulnerability in his Reolink camera's NGINX configuration. Guest Josh Marpet reacts strongly, comparing the creation to a modern, modular Metasploit that could upset the security industry by automating processes companies pay heavily for. The conversation shifts to applications like inventorying encryption for post-quantum cryptography readiness, with Josh noting the tool could find weak TLS, certificates, and asymmetric encryption across an enterprise. Paul describes how Claude can also analyze firmware, checking for secure boot, firmware encryption, and cryptographic validation by examining boot logs or unpacked firmware. He mentions using tools like binwalk and on-blob for firmware unpacking. The discussion covers the 'buy vs. build' debate changing due to AI, the problem of AI-generated low-quality bug bounty submissions, and the importance of scanning network edge devices daily. Paul considers adding profiling to the tool for targeted scans (e.g., Fortinet devices) and containerization. Josh shares his use of a personal AI assistant named Daniel for project management, while Paul talks about training AI to write in his style. The episode concludes with plans to expand the tool with more integrations and profiles.

As heard by us

A practical tour of scanning tools, target-list design, and the permissions problem behind internet-wide reconnaissance.

Internet-scale scanning gets a grounded, practical treatment, with the focus on turning broad discovery into a target list someone can actually use.

Read the full review in PlayNext →

Why you'd press play

Want to turn Shodan, ZMap, ZGrab, Nerva, and Nuclei into one Linux workflow?

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Paul's Security Weekly (Audio)