Error: Unable to scan YOUR_HOST on ports 0..1023. Please use a permitted port 1024..65535 to proceed.

Per StackHawk's troubleshooting guide: the scan runs in an unprivileged container, so YOUR_HOST scans must target a permitted port (1024-65535). Move your app off the kernel port and rerun the scan.

Context: Problem: A HawkScan run against a local app fails with: Error: Unable to scan YOURHOST on ports 0..1023. Please use a permitted port 1024..65535 to proceed. Cause: HawkScan reports this error when a kernel port (0..1023) is set for a scan against YOURHOST. HawkScan runs in an unprivileged container, which only provides permissions for the userland context, so scans against YOURHOST must use a permitted ephemeral port (1024-65535). Fix: point the scan at a permitted port, e.g. run the app on port 8080 and set host to YOURHOST (port 8080) in stackhawk.yml, then rerun hawk scan. If the scanner still cannot reach the app on YOUR_HOST, add --network=host to the docker run command.

Matched source

Source: Source: https://docs.stackhawk.com/hawkscan/troubleshooting/ Original query: "Error: Unable to scan YOURHOST on ports 0..1023. Please use a permitted port 1024..65535 to proceed." Also searched as: "Unable to scan YOURHOST on ports 0..1023. Please use a permitted port 1024..65535 to proceed." Key terms: 1023, 1024, 65535, error, host, permitted, please, port, ports, proceed, scan, unable

Source: Problem: A HawkScan run against a local app fails with: Error: Unable to scan YOURHOST on ports 0..1023. Please use a permitted port 1024..65535 to proceed. Cause: HawkScan reports this error when a kernel port (0..1023) is set for a scan against YOURHOST. HawkScan runs in an unprivileged container, which only provides permissions for the userland context, so scans against YOURHOST must use a permitted ephemeral port (1024-65535). Fix: point the scan at a permitted port, e.g. run the app on port 8080 and set host to YOURHOST (port 8080) in stackhawk.yml, then rerun hawk scan. If the scanner still cannot reach the app on YOUR_HOST, add --network=host to the docker run command.

Verified resolution: Per StackHawk's troubleshooting guide: the scan runs in an unprivileged container, so YOUR_HOST scans must target a permitted port (1024-65535). Move your app off the kernel port and rerun the scan.

Source URL: https://docs.stackhawk.com/hawkscan/troubleshooting/