diff --git a/config.php b/config.php index a251ee7..e816723 100644 --- a/config.php +++ b/config.php @@ -1,12 +1,12 @@ + @@ -29,14 +31,14 @@
-

Scanner un

+

Scanner un réseau

@@ -381,12 +383,12 @@ Exemples: /24 10.
@@ -429,17 +431,13 @@ Exemples: /24 10.
> + oninput="initialRTTHidden.value = initialRTTNumber.value? initialRTTNumber.value+initialRTTUnit.value: ''; maxRTTHidden.initial=initialRTTHidden.value">
@@ -448,20 +446,19 @@ Exemples: /24 10.
> + oninput="minRTTHidden.value = minRTTNumber.value? minRTTNumber.value+minRTTUnit.value: ''; maxRTTHidden.min=minRTTHidden.value">
@@ -470,20 +467,19 @@ Exemples: /24 10.
> + oninput="maxRTTHidden.value = maxRTTNumber.value? maxRTTNumber.value+maxRTTUnit.value: ''; minRTTHidden.max=maxRTTHidden.value">
@@ -501,17 +497,16 @@ Exemples: /24 10.
> + oninput="hostTimoutHidden.value = hostTimoutNumber.value? hostTimoutNumber.value+hostTimoutUnit.value: ''">
@@ -522,17 +517,16 @@ Exemples: /24 10.
> + oninput="scanDelayHidden.value = scanDelayNumber.value? scanDelayNumber.value+scanDelayUnit.value: ''">
@@ -541,19 +535,18 @@ Exemples: /24 10.
> + oninput="maxRTTHidden.value = maxScanDelay.value? maxScanDelay.value+maxRTTUnit.value: ''">
@@ -652,7 +645,7 @@ Exemples: /24 10. \n"; + echo "\n"; if (file_exists("$dir/nmap-services")) { $nmap_services = file("$dir/nmap-services"); foreach ($nmap_services as $service) { diff --git a/rescan.php b/rescan.php index 2fd0ce1..31f8863 100644 --- a/rescan.php +++ b/rescan.php @@ -20,7 +20,7 @@ if (!file_exists($path)) { $xml = simplexml_load_file($path); $cmd = $xml["args"]; -if (substr( $cmd, 0, 5 ) != "nmap ") { +if (substr($cmd, 0, 5) != "nmap ") { die("Erreur : $path n'est pas un fichier de scan nmap"); } @@ -29,4 +29,4 @@ $cmd = $NMAP . substr($xml["args"], 4); header('Content-type: text/xml'); system("$cmd", $retcode); -exit(); \ No newline at end of file +exit(); diff --git a/scan.php b/scan.php index d43e735..0b8089a 100644 --- a/scan.php +++ b/scan.php @@ -2,20 +2,20 @@ include_once 'config.php'; -$fileNameRegex = '/^[0-9a-zA-Z-_. ]+$/'; -$targetsListRegex = '/^[\da-zA-Z-. \/]+$/'; +$fileNameRegex = '/^[\da-zA-Z-_. ]+$/'; +$targetsListRegex = '/^[\da-zA-Z-_. \/]+$/'; $name = filter_input(INPUT_GET, 'name', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => $fileNameRegex], "flags" => FILTER_NULL_ON_FAILURE]); $lan = filter_input(INPUT_GET, 'lan', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => $targetsListRegex], "flags" => FILTER_NULL_ON_FAILURE]); if ($lan) { - $cmd = "$NMAP $LANSCANOPTIONS --stylesheet '$BASEDIR/$STYLESHEETSDIR/lanScan.xsl?name=$name' -oX - $lan"; + $cmd = "$NMAP $LANSCANOPTIONS $COMMONOPTIONS --stylesheet '$BASEDIR/$STYLESHEETSDIR/lanScan.xsl?name=" . rawurlencode($name) . "' -oX - $lan"; $filename = str_replace("/", "!", $lan); } $host = filter_input(INPUT_GET, 'host', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => $targetsListRegex], "flags" => FILTER_NULL_ON_FAILURE]); if ($host) { - $cmd = "$NMAP $HOSTSCANOPTIONS --stylesheet '$BASEDIR/$STYLESHEETSDIR/hostScan.xsl?name=$name' -oX - $host"; + $cmd = "$NMAP $HOSTSCANOPTIONS $COMMONOPTIONS --stylesheet '$BASEDIR/$STYLESHEETSDIR/hostScan.xsl?name=" . rawurlencode($name) . "' -oX - $host"; $filename = str_replace("/", "!", $host); } @@ -147,7 +147,7 @@ if ($targets) { } } - $cmd = "$NMAP$options $CUSTOMSCANOPTIONS --stylesheet $BASEDIR/$STYLESHEETSDIR/lanScan.xsl?name=$name' -oX - $targets"; + $cmd = "$NMAP$options $COMMONOPTIONS --stylesheet '$BASEDIR/$STYLESHEETSDIR/lanScan.xsl?name" . rawurlencode($name) . "' -oX - $targets"; $filename = str_replace("/", "!", $targets); } diff --git a/stylesheets/hostScan.xsl b/stylesheets/hostScan.xsl index d892093..cbc9493 100644 --- a/stylesheets/hostScan.xsl +++ b/stylesheets/hostScan.xsl @@ -2,23 +2,27 @@ - - - - + + + + - + - + - - + + @@ -29,10 +33,12 @@ +
- + @@ -54,9 +60,12 @@ $('.ui.dropdown').dropdown() - - - + + + @@ -86,7 +95,8 @@ $('.ui.dropdown').dropdown() - +
@@ -146,7 +156,8 @@ $('.ui.dropdown').dropdown()
- +
Informations supplémentaires
@@ -156,26 +167,32 @@ $('.ui.dropdown').dropdown()
-

Services

+

Services

- +
- + - - - + + + red @@ -187,7 +204,8 @@ $('.ui.dropdown').dropdown() -
+
@@ -236,7 +254,8 @@ $('.ui.dropdown').dropdown()
- + @@ -244,7 +263,8 @@ $('.ui.dropdown').dropdown() rdp.php?v= &p= - + @@ -256,7 +276,8 @@ $('.ui.dropdown').dropdown() :// - + : @@ -271,11 +292,13 @@ $('.ui.dropdown').dropdown() - + --free: ; --total: - + @@ -309,7 +332,8 @@ $('.ui.dropdown').dropdown() - + @@ -362,7 +386,9 @@ $('.ui.dropdown').dropdown() - @@ -391,10 +417,17 @@ $('.ui.dropdown').dropdown() - - ( - - ) + + + + ( + + ) + + + + + diff --git a/stylesheets/lanScan.xsl b/stylesheets/lanScan.xsl index 6205150..246d995 100644 --- a/stylesheets/lanScan.xsl +++ b/stylesheets/lanScan.xsl @@ -2,22 +2,26 @@ - - - - + + + + - + - + - - + + @@ -28,13 +32,14 @@ +

- +
@@ -45,7 +50,8 @@

- +
@@ -59,7 +65,8 @@ - + @@ -95,9 +102,12 @@ $('.ui.dropdown').dropdown() - - - + + + @@ -144,14 +154,17 @@ $('.ui.dropdown').dropdown() . - + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Remote Operating System Detection

- -

Unable to identify operating system.

 - -
    - -
  • Used port: / ()
    • -     - - -
  • OS match: (%)
    • -     -
- - - - - - - - - - - - - - - - -
    -
  • Cannot determine exact operating system. Fingerprint provided below.
    • -
  • If you know what OS is running on it, see https://nmap.org/submit/
    • -
-
Etat
- + diff --git a/stylesheets/head.xsl b/stylesheets/lib/head.xsl similarity index 100% rename from stylesheets/head.xsl rename to stylesheets/lib/head.xsl diff --git a/stylesheets/nav.xsl b/stylesheets/lib/nav.xsl similarity index 100% rename from stylesheets/nav.xsl rename to stylesheets/lib/nav.xsl diff --git a/stylesheets/services.xsl b/stylesheets/lib/services.xsl similarity index 100% rename from stylesheets/services.xsl rename to stylesheets/lib/services.xsl diff --git a/stylesheets/toast.xsl b/stylesheets/lib/toast.xsl similarity index 100% rename from stylesheets/toast.xsl rename to stylesheets/lib/toast.xsl diff --git a/stylesheets/nmap.xsl b/stylesheets/nmap.xsl deleted file mode 100644 index 1be7ead..0000000 --- a/stylesheets/nmap.xsl +++ /dev/null @@ -1,1071 +0,0 @@ - - - - - - - -0.9c - - - - - - - - - - - - - - - - - - - - -generated with nmap.xsl - version by Benjamin Erb - http://www.benjamin-erb.de/nmap_xsl.php - - - - Nmap Scan Report - Scanned at <xsl:value-of select="$start" /> - - - - - - - - -
- -

Nmap Scan Report - Scanned at

- - - - - scansummary - - -
- -

Scan Summary

- -

- Nmap was initiated at with these arguments:
-
-

-

- Verbosity: ; Debug level -

- -

- -

- - - - - - - - - -
- - - - - - - - - - - -
- - - - - host_ - - - - - -

- - - - - / - - - - (online) -

- - - - -

- - - - - / - - - - - javascript:toggle('hostblock_'); - host_down - (click to expand) - - (offline)

- - - - - - - hostblock_ - - - - unhidden - - - - hidden - - - - - -

Address

- -
    - -
  • - - - - - - - () -
    • -     -
- - - - - -
- - - javascript:toggle('metrics_'); - Misc Metrics (click to expand) - - - - - metrics_ - hidden - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
MetricValue
Ping Results - - from - - -
System Uptime seconds (last reboot: ) -
Network Distance hops
TCP Sequence PredictionDifficulty= ()
IP ID Sequence Generation
- - - - - - - - - - - - -

Hostnames

 - - - - - - -
  • ()
    • -     - - - - - - -

    Ports

    - - -

    The ports scanned but not shown below are in state:

    -     - -
      - - -

    • ports replied with:

      • -       -       -
    -     - - - - - - - - - - - porttable_ - 1 - -
    PortState - - javascript:togglePorts('porttable_','closed'); - (toggle closed [] - - - javascript:togglePorts('porttable_','filtered'); - | filtered []) - - ServiceReasonProductVersionExtra info
      - - from - - -    
      - 
      
    -
      - - from - - -    
      - - from - - -    
      - - from - - -    
    - - - - - - -
    Operating System fingerprint
    - - - - -
      -
    • OS identified but the fingerprint was requested at scan time. - - - javascript:toggle('osblock_'); - (click to expand) - -
      • -
    - - - osblock_ - hidden - - - - - - - - -
    Operating System fingerprint
    - -     - -     - - - - - - - - - - -
    - - - prescript - - -

    Pre-Scan Script Output

    - - - - - - - - - - - - - - -
    Script NameOutput
    -   - - 
    -           
-
    -
    -     - - - - - - -
    - - - postscript - - -

    Post-Scan Script Putput

    - - - - - - - - - - - - - - -
    Script NameOutput
    -   - - 
    -           
-
    -
    -     - - - - - - -

    Host Script Output

    - - - - - - - - - - - - - - -
    Script NameOutput
    -   - - 
    -              
-
    -
    -     - - - - - -

    Smurf Responses

    -
      -
    • responses counted
      • -
    -     -     - - - - - - - - - - - - - - javascript:toggle('trace_'); - Traceroute Information (click to expand) - - - - trace_ - hidden - - - - -
    • Traceroute data generated using port /
    -     -     - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    HopRttIPHost
    --
    -     - -     -     - -