lanScan/scan.php
2024-10-14 14:43:55 +02:00

55 lines
1.6 KiB
PHP
Executable File

<?php
include_once 'config.php';
include_once 'filter_inputs.php';
if (!$targets) {
http_response_code(400);
die('Paramètre manquant : targets, lan ou host');
}
if (!file_exists($SCANSDIR)) mkdir($SCANSDIR);
$args = '';
foreach ($inputs as $arg => $value) {
if (is_null($value)) {
http_response_code(400);
die("Valeur incorecte pour le paramètre $arg : " . filter_input(INPUT_GET, $arg, FILTER_SANITIZE_FULL_SPECIAL_CHARS));
} else if ($value) {
if ($value === true) {
if (strlen($arg) <= 2) $args .= " -$arg";
else $args .= " --$arg";
} else {
if (strlen($arg) <= 2) $args .= " -$arg$value";
else $args .= " --$arg $value";
}
}
}
$tempPath = tempnam(sys_get_temp_dir(), 'scan_').".xml";
exec(($sudo ? "sudo " : "") . "nmap$args -oX '$tempPath' $targets 2>&1", $stderr, $code);
if ($code) {
http_response_code(500);
die(implode("<br/>\n", $stderr));
}
$xml = new DOMDocument();
$xml->load($tempPath);
`rm "$tempPath"`;
$saveAsURL = $saveAs? "$BASEDIR/$SCANSDIR/$saveAs.xml" : "";
$xml->insertBefore($xml->createProcessingInstruction('xslt-param', "name='savedAs' value='".htmlentities($saveAsURL, ENT_QUOTES)."'"), $xml->documentElement);
$xml->insertBefore($xml->createProcessingInstruction('xslt-param', "name='compareWith' value='".htmlentities($compareWith, ENT_QUOTES)."'"), $xml->documentElement);
if ($saveAs) {
$path = "$SCANSDIR/$saveAs.xml";
$xml->save($path);
header("Location: $path");
exit();
} else {
header('Content-type: text/xml');
exit($xml->saveXML());
}