adrien/lanScan2
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

nmap script http-get

Browse Source
This commit is contained in:
Adrien MALINGREY 2023-04-10 22:03:32 +02:00
parent a552a3cc06
commit 6243bc66e5
7 changed files with 51 additions and 32 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.gitignore vendored
View File

@ -1,2 +1,3 @@
site/ confs/
scans/ scans/
site/

2
README.md
View File

@ -2,7 +2,7 @@
Scan hosts with nmap and display results in webpage. Scan hosts with nmap and display results in webpage.
* Create a configuration yaml file in site/ subdirectory (see example below). * Create a configuration yaml file in confs/ subdirectory (see example below).
It may be generated by scanning a network with `init.sh`. It may be generated by scanning a network with `init.sh`.
* Scan with `php scan_all.php` (use a cron task!). * Scan with `php scan_all.php` (use a cron task!).
* Open index.php to see results. * Open index.php to see results.

42
http-get.nse Normal file
View File

@ -0,0 +1,42 @@
local shortport = require "shortport"
description = [[
Get and return a page info
]]
---
-- @args http-get.path Path to get. Default /.
--
-- @usage nmap -p80 --script http-get.nse --script-args http-get.path=/ <target>
--
-- @output
-- body:<html>...</html>
-- status: 200
-- status-line: HTTP/1.1 200 OK\x0D
-- header: ...
-- rawheader: ...
-- cookies:
-- ssl: false
-- version: 1.1
---
categories = {"discovery", "intrusive"}
author = "Adrien Malingrey"
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
portrule = shortport.http
local http = require "http"
local stdnse = require "stdnse"
action = function(host, port)
local path = ""
if(stdnse.get_script_args('http-get.path')) then
path = "/" .. stdnse.get_script_args('http-get.path')
end
return http.get( host, port, "/" .. path )
end

25
http-status.nse
View File

@ -1,25 +0,0 @@
local shortport = require "shortport"
description = [[
Get root page and return status code
]]
---
-- @usage nmap -p80 --script http-status.nse <target>
--
-- @output
-- 404
---
categories = {"discovery", "intrusive"}
author = "Adrien Malingrey"
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
portrule = shortport.http
local http = require "http"
action = function(host, port)
return http.get( host, port, "/" ).status
end

2
init.sh
View File

@ -11,4 +11,4 @@ read site
echo "Adresse réseau CIDR (xxx.xxx.xxx.xxx/xx) ?" echo "Adresse réseau CIDR (xxx.xxx.xxx.xxx/xx) ?"
read network read network
nmap --script smb-enum-shares.nse -oX "scans/$site.xml" $network nmap --script smb-enum-shares.nse -oX "scans/$site.xml" $network
xsltproc --stringparam site "$site" --stringparam network $network toyaml.xsl "scans/$site.xml" > "site/$site.yaml" xsltproc --stringparam site "$site" --stringparam network $network toyaml.xsl "scans/$site.xml" > "confs/$site.yaml"

2
results.xsl
View File

@ -134,7 +134,7 @@
<a class="ui primary mini button" href="{$scannedPort/service/@name}://{$scannedHostAddress}:{$scannedPort/@portid}"> <a class="ui primary mini button" href="{$scannedPort/service/@name}://{$scannedHostAddress}:{$scannedPort/@portid}">
<xsl:attribute name="class"> <xsl:attribute name="class">
<xsl:choose> <xsl:choose>
<xsl:when test="$scannedPort/script[@id='http-status']>=400">ui red mini button</xsl:when> <xsl:when test="$scannedPort/script[@id='http-get']/elem[@key='status']>=400">ui red mini button</xsl:when>
<xsl:otherwise>ui primary mini button</xsl:otherwise> <xsl:otherwise>ui primary mini button</xsl:otherwise>
</xsl:choose> </xsl:choose>
</xsl:attribute> </xsl:attribute>

7
scan_all.php
View File

@ -8,11 +8,12 @@ if (! function_exists('str_ends_with')) {
} }
if (!file_exists("scans")) mkdir("scans"); if (!file_exists("scans")) mkdir("scans");
if (!file_exists("site")) mkdir("site");
foreach (scandir("./site/") as $file) { foreach (scandir("./confs/") as $file) {
if (str_ends_with($file, ".yaml")) { if (str_ends_with($file, ".yaml")) {
$site = str_replace(".yaml", "", $file); $site = str_replace(".yaml", "", $file);
$yaml = yaml_parse_file("site/$file"); $yaml = yaml_parse_file("confs/$file");
$targets = []; $targets = [];
$services = []; $services = [];
@ -46,7 +47,7 @@ foreach (scandir("./site/") as $file) {
$targets = join(array_keys($targets), " "); $targets = join(array_keys($targets), " ");
$services = join(array_keys($services), ","); $services = join(array_keys($services), ",");
exec("nmap -v -Pn -p $services --script smb-enum-shares.nse,./http-status.nse,./http-favicon-url.nse --script-args=httpspider.maxpagecount=1 -oX 'scans/$site.xml' $targets\n"); exec("nmap -v -Pn -p $services --script smb-enum-shares.nse,./http-get.nse,./http-favicon-url.nse --script-args=httpspider.maxpagecount=1 -oX 'scans/$site.xml' $targets\n");
} }
}; };