fix: map top-N port spec to naabu top-ports, not the -p list

The control plane sends ports as "top-100"; passing it straight to naabu's
-p made it read "top" as a port and fail. Route "top-<N>"/"full" to TopPorts
and only literal lists/ranges to Ports.

Author: ShubhamRasal

pkg/runtools/naabu.go

@@ -8,6 +8,7 @@ import (
 	"net"
 	"os"
 	"strconv"
+	"strings"
 	"sync"
 
 	"github.com/projectdiscovery/goflags"
@@ -19,7 +20,8 @@ import (
 type NaabuOptions struct {
 	// OutputFile receives one "host:port" line per open port. Required.
 	OutputFile string
-	// Ports is a comma-separated list (e.g. "80,443,8443"); empty uses naabu's top-1000.
+	// Ports is the control-plane port spec: "top-<N>" (e.g. "top-100"), "full",
+	// or a literal list/range ("80,443", "1-1000"). Empty uses naabu's default.
 	Ports             string
 	SkipHostDiscovery bool
 	// ServiceVersion enables nmap-service-probes scanning (no external nmap binary).
@@ -47,7 +49,6 @@ func RunNaabu(ctx context.Context, hosts []string, opts NaabuOptions) (string, e
 	var mu sync.Mutex
 	naabuOpts := &runner.Options{
 		Host:              goflags.StringSlice(hosts),
-		Ports:             opts.Ports,
 		SkipHostDiscovery: opts.SkipHostDiscovery,
 		ServiceVersion:    opts.ServiceVersion,
 		ServiceDiscovery:  opts.ServiceDiscovery,
@@ -69,6 +70,7 @@ func RunNaabu(ctx context.Context, hosts []string, opts NaabuOptions) (string, e
 			}
 		},
 	}
+	setNaabuPorts(naabuOpts, opts.Ports)
 
 	r, err := runner.NewRunner(naabuOpts)
 	if err != nil {
@@ -82,3 +84,21 @@ func RunNaabu(ctx context.Context, hosts []string, opts NaabuOptions) (string, e
 	}
 	return opts.OutputFile, nil
 }
+
+// setNaabuPorts routes the control-plane port spec to the right naabu field.
+// "top-<N>" and "full" select naabu's top-ports list (-top-ports); a literal
+// list/range goes to -p. Passing "top-100" to Ports makes naabu read it as a
+// range and fail with "invalid port number: 'top'".
+func setNaabuPorts(o *runner.Options, spec string) {
+	spec = strings.TrimSpace(spec)
+	switch {
+	case spec == "":
+		// leave naabu's default
+	case strings.EqualFold(spec, "full"):
+		o.TopPorts = "full"
+	case strings.HasPrefix(spec, "top-"):
+		o.TopPorts = strings.TrimPrefix(spec, "top-")
+	default:
+		o.Ports = spec
+	}
+}

pkg/runtools/naabu_test.go

@@ -3,6 +3,8 @@ package runtools
 import (
 	"context"
 	"testing"
+
+	"github.com/projectdiscovery/naabu/v2/pkg/runner"
 )
 
 func TestRunNaabu_RequiresOutputFile(t *testing.T) {
@@ -11,3 +13,33 @@ func TestRunNaabu_RequiresOutputFile(t *testing.T) {
 		t.Fatal("expected error when OutputFile is empty")
 	}
 }
+
+// Guards against the "invalid port number: 'top'" failure: the control plane
+// sends "top-100", which must map to naabu's TopPorts, not the -p list.
+func TestSetNaabuPorts(t *testing.T) {
+	tests := []struct {
+		spec         string
+		wantTopPorts string
+		wantPorts    string
+	}{
+		{"top-100", "100", ""},
+		{"top-1000", "1000", ""},
+		{"full", "full", ""},
+		{"80,443", "", "80,443"},
+		{"1-1000", "", "1-1000"},
+		{"", "", ""},
+		{" top-100 ", "100", ""},
+	}
+	for _, tt := range tests {
+		t.Run(tt.spec, func(t *testing.T) {
+			o := &runner.Options{}
+			setNaabuPorts(o, tt.spec)
+			if o.TopPorts != tt.wantTopPorts {
+				t.Errorf("TopPorts = %q, want %q", o.TopPorts, tt.wantTopPorts)
+			}
+			if o.Ports != tt.wantPorts {
+				t.Errorf("Ports = %q, want %q", o.Ports, tt.wantPorts)
+			}
+		})
+	}
+}