Merge branch 'master' of https://git.malingrey.fr/adrien/lanScan2

.gitignore

@@ -1,3 +1,4 @@
-confs/
+nse/script-args.ini
+configs/
 scans/
 site/

LISEZMOI.md

@@ -0,0 +1,28 @@
+# lanScan
+
+Scanne des hôtes avec `nmap`
+et affiche le résultat dans une page web.
+
+* Créer un fichier de configuration YAML dans un sous-dossier ./configs/ (voir l'exemple ci-dessous).
+Il peut être généré en scannant un réseau avec : `./discover.sh <CIDR>`.
+* Scanner avec le script `./scan_all.sh` (utiliser une tâche cron !).
+* Voir les résultats en ouvrant `.\index.php` dans le navigateur web.
+
+## Exemple 
+```yaml
+---
+site: Nom du site
+
+hosts:
+  - name: Nom du premier groupe
+    host:
+      - address: host1.local
+        services: [ssh, http]
+      - address: 192.168.1.100
+        services: [ftp, https, 5432]
+  - name: Nom du 2ème groupe
+    host:
+      - adress: host3.local
+        services: [ssh, ftp, 8006]
+```
+

README.md

@@ -1,19 +1,27 @@
 # lanScan
 
-Scan hosts with nmap and display results in webpage.
+Scan hosts with `nmap` and display results in webpage.
 
-* Create a configuration yaml file in confs/ subdirectory (see example below).
+* Create a configuration yaml file in ./configs/ subdirectory (see example below).
-It may be generated by scanning a network with `init.sh`.
+It may be generated by scanning a network with `./discover.sh <CIDR>`.
 * Scan with `./scan_all.sh` (use a cron task!).
-* Open index.php to see results.
+* Open `.\index.php` in web browser to see results.
 
 ## Example 
 ```yaml
-site:
+---
-  group1:
+site: Nom du site
-    host1.local: [ssh, http]
+
-    host2.local: [ftp, https, 5432]
+hosts:
-  group2:
+  - name: Nom du premier groupe
-    host3: [ssh, ftp, 8006]
+    host:
+      - address: host1.local
+        services: [ssh, http]
+      - address: 192.168.1.100
+        services: [ftp, https, 5432]
+  - name: Nom du 2ème groupe
+    host:
+      - adress: host3.local
+        services: [ssh, ftp, 8006]
 ```
 

discover.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+
+###
+#
+# Scan un réseau avec nmap pour créer un fichier de configuration
+# Usage : ./discover <reseau> avec reseau en notation CIDR XXX.XXX.XXX.XXX/XX
+#
+###
+
+if [ "$#" -ne 1 ]; then
+    echo -e "Usage : ./discover <CIDR>\navec <CIDR> l'adresse réseau en notation CIDR (XXX.XXX.XXX.XXX/XX)"  >&2
+    exit 1
+fi
+
+pushd "$(dirname -- "$0")" > /dev/null
+network="$1"
+site="${network/\//_}"
+
+mkdir -p "scans"
+nmap -F -oX "scans/$site.xml" $network
+mkdir -p "configs"
+xsltproc --stringparam network "$network" to_config.xsl "scans/$site.xml" > "configs/$site.yml"
+php to_XML.php "configs/$site.yml" > "site/$site.xml"
+
+popd > /dev/null

init.sh

@@ -1,19 +0,0 @@
-#!/usr/bin/env bash
-
-###
-#
-# Scan un réseau avec nmap pour créer un fichier de configuration
-#
-###
-
-DIR="$(dirname -- "$0")"
-
-echo "Nom du site ?"
-read site
-filename="${site/ /_}"
-echo "Adresse réseau CIDR (xxx.xxx.xxx.xxx/xx) ?"
-read network
-
-
-nmap --script smb-enum-shares.nse -oX "scans/$filename.xml" $network
-xsltproc --stringparam site "$site" --stringparam network $network to_yaml.xsl "$DIR/scans/$filename.xml" > "$DIR/confs/$filename.yaml"

nmap_cmd.php

@@ -1,26 +0,0 @@
-<?php
-$file = $argv[1];
-$site = basename($file, ".yaml");
-$__DIR__ = __DIR__;
-
-$conf = yaml_parse_file($file);
-
-$targets = [];
-$services = [];
-
-foreach ($conf as $key => $value) {
-    if ($key != "site") {
-        foreach($value as $hostaddress => $servicesList) {
-            $targets[$hostaddress] = true;
-            if ($servicesList) foreach ($servicesList as $service) {
-                $services[$service] = true;
-            }
-        }
-    }
-}
-
-$targets = join(array_keys($targets), " ");
-$services = join(array_keys($services), ",");
-
-echo ("nmap -v -Pn -p $services --script smb-enum-shares,$__DIR__/nmap -oX $__DIR__/scans/.~$site.xml $targets");
-?>

nmap_cmd.xsl

@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="utf-8"?>
+<xsl:stylesheet
+    xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
+    xmlns:xs="http://www.w3.org/2001/XMLSchema"
+    version="1.1">
+<xsl:output method="text" encoding="UTF-8" indent="yes" />
+
+<xsl:param name="site"/>
+
+<xsl:template match="lanScan">
+<xsl:text>nmap -v -T4 -Pn -p </xsl:text>
+<xsl:apply-templates select="//service[not(.=preceding::*)]" />
+<xsl:text> --script nse/ --datadir nse/ --script-args-file script-args.ini -oX "</xsl:text>
+<xsl:value-of select="@scanpath"/>
+<xsl:text>.tmp" </xsl:text>
+<xsl:apply-templates select="//host"/>
+<xsl:text>
+</xsl:text>
+</xsl:template>
+
+<xsl:template match="service">
+<xsl:value-of select="." />
+<xsl:if test="position() != last()">
+<xsl:text>,</xsl:text>
+</xsl:if>
+</xsl:template>
+
+<xsl:template match="host">
+<xsl:value-of select="@address" />
+<xsl:if test="position() != last()">
+<xsl:text> </xsl:text>
+</xsl:if>
+</xsl:template>
+
+</xsl:stylesheet>

nse/http-info.nse

@@ -7,7 +7,7 @@ Get and return a page info
 ---
 -- @args http-get.path Path to get. Default /.
 --
--- @usage nmap -p80 --script http-get.nse --script-args http-get.path=/ <target>
+-- @usage nmap -p80 --script http-info.nse --script-args http-info.path=/ <host>
 --
 -- @output
 -- status: 200
@@ -20,16 +20,16 @@ license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
 
 portrule = shortport.service({"http", "https", "ssl"})
 
-
 local http = require "http"
 local stdnse = require "stdnse"
 
 action = function(host, port)
   local scheme = ""
   local hostaddress = (host.name ~= '' and host.name) or host.ip
-  local path = ""
+  local path = "/"
-  local answer
+  local uri
-  local favicon = "/favicon.ico"
+  local favicon_relative_uri = "/favicon.ico"
+  local favicon
 
   if (port.service == "ssl") then
     scheme = "https"
@@ -38,23 +38,39 @@ action = function(host, port)
   end
 
   if(stdnse.get_script_args('http-get.path')) then
-    path = "/" .. stdnse.get_script_args('http-get.path')
+    path = stdnse.get_script_args('http-info.path')
   end
 
-  answer = http.get_url(scheme.."://"..hostaddress..":"..port.number.."/"..path)
+  uri = scheme.."://"..hostaddress..":"..port.number..path
+  stdnse.debug1("Try to download %s", uri)
+  local answer = http.get_url(uri, {})
+
+  local info = {status=answer.status, ["status-line"]=answer["status-line"]}
 
   if (answer and answer.status == 200) then
-    favicon_relative_uri = parseIcon(answer.body) or "/favicon.ico"
+    stdnse.debug1("[SUCCESS] Load page %s", uri)
+    -- Taken from http-title.nse by Diman Todorov
+    local title = string.match(answer.body, "<[Tt][Ii][Tt][Ll][Ee][^>]*>([^<]*)</[Tt][Ii][Tt][Ll][Ee]>")
+    if (title) then
+      info.title = title
+    end
+    stdnse.debug1("[INFO] Try favicon %s", favicon_relative_uri)
+    favicon_relative_uri = parseIcon(answer.body) or "favicon.ico"
+  else
+    stdnse.debug1("[ERROR] Can't load page %s", uri)
   end
   
-  favicon_absolute_uri = scheme.."://"..hostaddress..":"..port.number.."/"..favicon_relative_uri
+  favicon_absolute_uri = scheme.."://"..hostaddress..":"..port.number..favicon_relative_uri
-  favicon = http.get_url(favicon_absolute_uri)
+  favicon = http.get_url(favicon_absolute_uri, {})
 
   if (favicon and favicon.status == 200) then
-    return {status=answer.status, ["status-line"]=answer["status-line"], favicon=favicon_absolute_uri}
+    stdnse.debug1("[SUCCESS] Load favicon %s", favicon_absolute_uri)
+    info.favicon = favicon_absolute_uri
   else
-    return {status=answer.status, ["status-line"]=answer["status-line"]}
+    stdnse.debug1("[ERROR] Can't load favicon %s", favicon_absolute_uri)
   end
+  
+  return info
 end
 
 --- function taken from http_favicon.nse by Vlatko Kosturjak

nse/script-args.ini

@@ -0,0 +1,2 @@
+smbuser     = 
+smbpassword = 

nse/smb-shares-size.nse

@@ -0,0 +1,206 @@
+local stdnse    = require "stdnse"
+local smb       = require "smb"
+local smb2      = require "smb2"
+local msrpc     = require "msrpc"
+local bin       = require "bin"
+local shortport = require "shortport"
+
+description = [[
+Return free and total size in octets of each SMB shares
+]]
+
+---
+-- @args See the documentation for the smbauth library.
+--
+-- @usage nmap -p445 --script smb-shares-size.nse <host>
+--
+-- @output
+-- Host script results:
+-- | smb-shares-size:
+-- |   data:
+-- |     FreeSize: 38495883264
+-- |     TotalSize: 500961574912
+-- |_  IPC$: NT_STATUS_ACCESS_DENIED
+---
+
+categories = {"discovery", "intrusive"}
+author = "Adrien Malingrey"
+license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
+
+portrule = shortport.service({"microsoft-ds", "netbios-ssn", "smb"})
+
+
+action = function(host)
+  local status, shares, extra
+  local response = stdnse.output_table()
+
+  -- Try and do this the good way, make a MSRPC call to get the shares
+  stdnse.debug1("SMB: Attempting to log into the system to enumerate shares")
+  status, shares = msrpc.enum_shares(host)
+  if(status == false) then
+    return stdnse.format_output(false, string.format("Couldn't enumerate shares: %s", shares))
+  end
+
+  -- Get more information on each share
+  for i = 1, #shares, 1 do
+    local share = shares[i]
+    if (share ~= nil) then
+      local status, result = get_share_info(host, share)
+      if (status) then
+        response[share] = result
+      end
+    end
+  end
+
+  return response
+end
+
+TRANS2_QUERY_FS_INFORMATION = 0x0003
+SMB_QUERY_FS_SIZE_INFO      = 0x0103
+---Attempts to retrieve additional information about a share. Will fail unless we have
+-- administrative access.
+--
+--@param host The host object.
+--@return Status (true or false).
+--@return A table of information about the share (if status is true) or an an error string (if
+--        status is false).
+function get_share_info(host, share)
+  local status, smbstate, err
+  local hostaddress = (host.name ~= '' and host.name) or host.ip
+  local path = "\\\\" .. hostaddress .. "\\" .. share
+
+  status, smbstate = smb.start(host)
+  status, err      = smb.negotiate_protocol(smbstate, {})
+  status, err      = smb.start_session(smbstate, {})
+  status, err      = smb.tree_connect(smbstate, path, {})
+  
+  stdnse.debug1("SMB: Getting information for share: %s", path)
+  
+  local status, err = send_transaction2(smbstate, TRANS2_QUERY_FS_INFORMATION, bin.pack("<S", SMB_QUERY_FS_SIZE_INFO))
+  if ( not(status) ) then
+    status, err      = smb.stop(smbstate)
+    return false, "Failed to send data to server: send_transaction2"
+  end
+
+  local status, response = receive_transaction2(smbstate)
+  if ( not(status) ) then
+    status, err      = smb.stop(smbstate)
+    return false, response
+  end
+
+  local pos, totalAllocationUnits, totalFreeAllocationUnits, sectorsPerAllocationUnit, bytesPerSector = bin.unpack("<LLII", response.data)
+
+  status, err      = smb.stop(smbstate)
+
+  return true, {
+    TotalSize = totalAllocationUnits * sectorsPerAllocationUnit * bytesPerSector,
+    FreeSize = totalFreeAllocationUnits * sectorsPerAllocationUnit * bytesPerSector
+  }
+end
+
+-- Taken from smb lib
+
+function send_transaction2(smbstate, sub_command, function_parameters, function_data, overrides)
+  overrides = overrides or {}
+  local header1, header2, header3, header4, command, status, flags, flags2, pid_high, signature, unused, pid, mid
+  local header, parameters, data
+  local parameter_offset = 0
+  local parameter_size   = 0
+  local data_offset      = 0
+  local data_size        = 0
+  local total_word_count, total_data_count, reserved1, parameter_count, parameter_displacement, data_count, data_displacement, setup_count, reserved2
+  local response = {}
+
+  -- Header is 0x20 bytes long (not counting NetBIOS header).
+  header = smb.smb_encode_header(smbstate, smb.command_codes['SMB_COM_TRANSACTION2'], overrides) -- 0x32 = SMB_COM_TRANSACTION2
+
+  if(function_parameters) then
+    parameter_offset = 0x44
+    parameter_size = #function_parameters
+    data_offset = #function_parameters + 33 + 32
+  end
+
+  -- Parameters are 0x20 bytes long.
+  parameters = bin.pack("<SSSSCCSISSSSSCCS",
+    parameter_size,                  -- Total parameter count.
+    data_size,                       -- Total data count.
+    0x000a,                          -- Max parameter count.
+    0x3984,                          -- Max data count.
+    0x00,                            -- Max setup count.
+    0x00,                            -- Reserved.
+    0x0000,                          -- Flags (0x0000 = 2-way transaction, don't disconnect TIDs).
+    0x00001388,                      -- Timeout (0x00000000 = return immediately).
+    0x0000,                          -- Reserved.
+    parameter_size,                  -- Parameter bytes.
+    parameter_offset,                -- Parameter offset.
+    data_size,                       -- Data bytes.
+    data_offset,                     -- Data offset.
+    0x01,                            -- Setup Count
+    0x00,                            -- Reserved
+    sub_command                      -- Sub command
+    )
+
+  local data = "\0\0\0" .. (function_parameters or '')
+  .. (function_data or '')
+
+  -- Send the transaction request
+  stdnse.debug2("SMB: Sending SMB_COM_TRANSACTION2")
+  local result, err = smb.smb_send(smbstate, header, parameters, data, overrides)
+  if(result == false) then
+    stdnse.debug1("SMB: Try SMBv2 connexion")
+    local result, err = smb2.smb2_send(smbstate, header, parameters, data, overrides)
+    if(result == false) then
+      return false, err
+    end
+  end
+
+  return true
+end
+
+function receive_transaction2(smbstate)
+
+  -- Read the result
+  local status, header, parameters, data = smb.smb_read(smbstate)
+  if(status ~= true) then
+    stdnse.debug1("SMB: Try SMBv2 connexion")
+    local status, header, parameters, data = smb2.smb2_read(smbstate)
+      if(status ~= true) then
+        return false, header
+      end
+  end
+
+  -- Check if it worked
+  local pos, header1, header2, header3, header4, command, status, flags, flags2, pid_high, signature, unused, tid, pid, uid, mid = bin.unpack("<CCCCCICSSlSSSSS", header)
+  if(header1 == nil or mid == nil) then
+    return false, "SMB: ERROR: Server returned less data than it was supposed to (one or more fields are missing); aborting [29]"
+  end
+  if(status ~= 0) then
+    if(smb.status_names[status] == nil) then
+      return false, string.format("Unknown SMB error: 0x%08x\n", status)
+    else
+      return false, smb.status_names[status]
+    end
+  end
+
+  -- Parse the parameters
+  local pos, total_word_count, total_data_count, reserved1, parameter_count, parameter_offset, parameter_displacement, data_count, data_offset, data_displacement, setup_count, reserved2 = bin.unpack("<SSSSSSSSSCC", parameters)
+  if(total_word_count == nil or reserved2 == nil) then
+    return false, "SMB: ERROR: Server returned less data than it was supposed to (one or more fields are missing); aborting [30]"
+  end
+
+  -- Convert the parameter/data offsets into something more useful (the offset into the data section)
+  -- - 0x20 for the header, - 0x01 for the length.
+  parameter_offset = parameter_offset - 0x20 - 0x01 - #parameters - 0x02;
+  -- - 0x20 for the header, - 0x01 for parameter length, the parameter length, and - 0x02 for the data length.
+  data_offset = data_offset - 0x20 - 0x01 - #parameters - 0x02;
+
+  -- I'm not sure I entirely understand why the '+1' is here, but I think it has to do with the string starting at '1' and not '0'.
+  local function_parameters = string.sub(data, parameter_offset + 1, parameter_offset + parameter_count)
+  local function_data       = string.sub(data, data_offset      + 1, data_offset      + data_count)
+
+  local response = {}
+  response['parameters'] = function_parameters
+  response['data']       = function_data
+
+  return true, response
+end

results.xsl

@@ -5,12 +5,12 @@
     version="1.1">
 <xsl:output method="html" encoding="UTF-8" indent="yes"/>
 
-<xsl:variable name="scan" select="document(string(lanScanConf/@scanpath))/nmaprun"/>
+<xsl:variable name="scan" select="document(string(lanScan/@scanpath))/nmaprun"/>
 
-<xsl:template match="lanScanConf">
+<xsl:template match="lanScan">
 <html lang="fr">
     <head>
-        <title>lanScan - <xsl:value-of select="@site"/></title>
+        <title><xsl:value-of select="@site"/> - lanScan</title>
         <script src="https://cdn.jsdelivr.net/npm/jquery@3.6.3/dist/jquery.min.js"></script>
         <link rel="stylesheet" type="text/css" href="https://cdn.jsdelivr.net/npm/fomantic-ui@2.9.2/dist/semantic.min.css"/>
         <script src="https://cdn.jsdelivr.net/npm/fomantic-ui@2.9.2/dist/semantic.min.js"></script>
@@ -24,27 +24,51 @@
 .ui.mini.button {
     padding: 1em;
 }
-
 .icon {
     display: flex !important;
     align-items: center;
 }
-
 .icon > img {
     width: 16px;
     height: 16px;
     margin: auto;
 }
+
+.share-size {
+    --free-ratio: calc(var(--free) / var(--total));
+    --used-percent: calc(100% - 100%*var(--free-ratio));
+    --color: hsl(calc(120*var(--free-ratio)) 100% 50%);
+    background-image: linear-gradient(to right, var(--color) var(--used-percent), transparent var(--used-percent), transparent) !important;
+}
         </style>
-        <meta http-equiv="refresh" content="300"/>
+        <meta http-equiv="refresh" content="60"/>
     </head>
     <body>
         <header class="ui fixed blue inverted menu">
-            <a href="." class="header item">lan<img id="logo" src="../logo.svg" alt="S"/>can</a>
+            <a href=".." class="header item">lan<img id="logo" src="../logo.svg" alt="S"/>can</a>
-            <div class="item"><xsl:value-of select="@site"/></div>
+            <div class="header center item"><xsl:value-of select="@site"/></div>
         </header>
         <div class="ui main container">
+            <xsl:choose>
+                <xsl:when test="$scan/runstats/finished/@errormsg">
+                    <div class="ui negative icon message">
+                        <i class="exclamation triangle icon"></i>
+                        <div class="content">
+                            <div class="header" style="text-transform: capitalize"><xsl:value-of select="$scan/runstats/finished/@exit"/></div>
+                            <p><xsl:value-of select="$scan/runstats/finished/@errormsg"/></p>
+                        </div>
+                    </div>
+                </xsl:when>
+                <xsl:when test="$scan/runstats/finished/@summary">
+                    <div class="ui icon message">
+                        <i class="sitemap icon"></i>
+                        <div class="content">
+                            <div class="header" style="text-transform: capitalize"><xsl:value-of select="$scan/runstats/finished/@exit"/></div>
                             <p><xsl:value-of select="$scan/runstats/finished/@summary"/></p>
+                        </div>
+                    </div>
+                </xsl:when>
+            </xsl:choose>
             <xsl:apply-templates select="group"/>
         </div>
         <script>
@@ -56,7 +80,7 @@
 
 <xsl:template match="group">
     <h1 class="ui header"><xsl:value-of select="@name"/></h1>
-    <div class="ui doubling stackable four column compact grid">
+    <div class="ui doubling stackable five column compact grid">
         <xsl:apply-templates select="host"/>
     </div>
 </xsl:template>
@@ -73,45 +97,36 @@
                 <xsl:value-of select="$scannedHost/address/@addr"/>
             </xsl:when>
             <xsl:otherwise>
-                <xsl:value-of select="$scannedHost/address/@addr"/>
+                <xsl:value-of select="$address"/>
             </xsl:otherwise>
         </xsl:choose>
     </xsl:variable>
-    <div class="column">
+    <xsl:variable name="name">
-        <div>
-            <xsl:attribute name="class">
         <xsl:choose>
-                    <xsl:when test="$scannedHost/status/@state='up'">ui fluid mini left icon action input info</xsl:when>
+            <xsl:when test="@name"><xsl:value-of select="@name"/></xsl:when>
-                    <xsl:otherwise>ui fluid mini left icon action input error</xsl:otherwise>
+            <xsl:when test="$scannedHost/hostnames/hostname/@name"><xsl:value-of select="substring-before($scannedHost/hostnames/hostname/@name, '.')"/></xsl:when>
         </xsl:choose>
-            </xsl:attribute>
+    </xsl:variable>
+    <div class="column">
+        <xsl:variable name="status">
             <xsl:choose>
-                <xsl:when test="$scannedHost/ports/port/script[@id='http-favicon-url']/@output">
+                <xsl:when test="$scannedHost/status/@state='up'">success</xsl:when>
-                    <i class="icon"><img class="ui image" src="{$scannedHost/ports/port/script[@id='http-favicon-url']/@output}" alt=""/></i>
+                <xsl:otherwise>error</xsl:otherwise>
+            </xsl:choose>
+        </xsl:variable>
+        <div class="ui fluid mini left icon action input {$status}">
+            <xsl:choose>
+                <xsl:when test="$scannedHost/ports/port/script[@id='http-info']/elem[@key='favicon']">
+                    <i class="icon"><img class="ui image" src="{$scannedHost/ports/port/script[@id='http-info']/elem[@key='favicon']}" alt=""/></i>
                 </xsl:when>
                 <xsl:otherwise>
                     <i class="server icon"></i>
                 </xsl:otherwise>
             </xsl:choose>
-            <input type="text" readonly="">
+            <input type="text" readonly="" value="{$name}" placeholder="{$scannedHost/address/@addr}"
-                <xsl:attribute name="value">
+            title="{@comment} {$scannedHost/hostnames/hostname/@name} ({$scannedHost/address/@addr}) "
-                    <xsl:choose>
+                onfocus="this.value='{$scannedHostAddress}'; this.select()" onblur="this.value='{$name}'"
-                        <xsl:when test="substring-before($scannedHost/hostnames/hostname/@name, '.')"><xsl:value-of select="substring-before($scannedHost/hostnames/hostname/@name, '.')"/></xsl:when>
+            />
-                        <xsl:when test="$scannedHost/hostnames/hostname/@name"><xsl:value-of select="$scannedHost/hostnames/hostname/@name"/></xsl:when>
-                        <xsl:when test="$scannedHost/address/@addr"><xsl:value-of select="$scannedHost/address/@addr"/></xsl:when>
-                        <xsl:when test="contains('0123456789', substring(@address,1,1))"><xsl:value-of select="@address"/></xsl:when>
-                        <xsl:when test="substring-before(@address, '.')"><xsl:value-of select="substring-before(@address, '.')"/></xsl:when>
-                        <xsl:otherwise><xsl:value-of select="@address"/></xsl:otherwise>
-                    </xsl:choose>
-                </xsl:attribute>
-                <xsl:attribute name="title">
-                    <xsl:choose>
-                        <xsl:when test="$scannedHost/hostnames/hostname/@name"><xsl:value-of select="$scannedHost/hostnames/hostname/@name"/> (<xsl:value-of select="$scannedHost/address/@addr"/>)</xsl:when>
-                        <xsl:when test="$scannedHost/address/@addr"><xsl:value-of select="$scannedHost/address/@addr"/></xsl:when>
-                        <xsl:otherwise><xsl:value-of select="@address"/></xsl:otherwise>
-                    </xsl:choose>
-                </xsl:attribute>
-            </input>
             <xsl:apply-templates select="service">
                 <xsl:with-param name="scannedHost" select="$scannedHost"/>
                 <xsl:with-param name="scannedHostAddress" select="$scannedHostAddress"/>
@@ -123,13 +138,12 @@
 <xsl:template match="service">
     <xsl:param name="scannedHost"/>
     <xsl:param name="scannedHostAddress"/>
-    <xsl:variable name="serviceName" select="@name"/>
+    <xsl:variable name="serviceName" select="."/>
-    <xsl:variable name="scannedPort" select="$scannedHost/ports/port[service/@name=$serviceName or @portid=$serviceName]"/>
+    <xsl:variable name="scannedPort" select="$scannedHost/ports/port[service/@name=$serviceName or @portid=$serviceName][1]"/>
     <xsl:variable name="state">
         <xsl:choose>
-            <xsl:when test="$scannedPort/script[@id='http-get']/elem[@key='status']>=400">red</xsl:when>
+            <xsl:when test="$scannedPort/state/@state='open'">green</xsl:when>
             <xsl:when test="$scannedPort/state/@state='filtered'">yellow</xsl:when>
-            <xsl:when test="$scannedPort/state/@state='open'">primary</xsl:when>
             <xsl:otherwise>red</xsl:otherwise>
         </xsl:choose>
     </xsl:variable>
@@ -138,39 +152,60 @@
         <xsl:text>/</xsl:text>
         <xsl:value-of select="$scannedPort/@protocol"/>
         <xsl:text> </xsl:text>
-        <xsl:value-of select="$scannedPort/service/@name"/>
-        <xsl:text> </xsl:text>
         <xsl:value-of select="$scannedPort/state/@state"/>
-        <xsl:if test="$scannedPort/script[@id='http-get']/elem[@key='status-line']">
         <xsl:text> </xsl:text>
-            <xsl:value-of select="$scannedPort/script[@id='http-get']/elem[@key='status-line']"/>
+        <xsl:value-of select="$scannedPort/service/@name"/>
-        </xsl:if>
     </xsl:variable>
     <xsl:choose>
-        <xsl:when test="($scannedPort/service/@name='microsoft-ds' or $scannedPort/service/@name='netbios-ssn' or $scannedPort/service/@name='smb') and $scannedHost/hostscript/script[@id='smb-enum-shares']/table[not(contains(@key, '$'))]">
+        <xsl:when test="$scannedPort/script[@id='smb-shares-size']/table">
-            <div class="ui {$state} dropdown mini button" title="{$title}">
+            <div class="ui {$state} dropdown mini button share-size" title="{$title}">
-                <div class="text"><xsl:value-of select="@name"/></div>
+                <xsl:attribute name="style">
+                    <xsl:for-each select="$scannedPort/script[@id='smb-shares-size']/table">
+                        <xsl:sort select="elem[@key='FreeSize'] div elem[@key='TotalSize']" order="ascending"/>
+                        <xsl:if test="position()=1">
+                            <xsl:text>--free: </xsl:text>
+                            <xsl:value-of select="elem[@key='FreeSize']"/>
+                            <xsl:text>; --total: </xsl:text>
+                            <xsl:value-of select="elem[@key='TotalSize']"/>
+                        </xsl:if>
+                    </xsl:for-each>
+                </xsl:attribute>
+                <xsl:value-of select="$serviceName"/>
                 <i class="dropdown icon"></i>
                 <div class="menu">
-                    <xsl:apply-templates select="$scannedHost/hostscript/script[@id='smb-enum-shares']/table[not(contains(@key, '$'))]">
+                    <xsl:apply-templates select="$scannedPort/script[@id='smb-shares-size']/table">
-                        <xsl:with-param name="scannedHost" select="$scannedHost"/>
+                        <xsl:with-param name="scannedHostAddress" select="$scannedHostAddress"/>
                     </xsl:apply-templates>
                 </div>
             </div>
         </xsl:when>
         <xsl:when test="$scannedPort/service/@name='ms-wbt-server' or $scannedPort/service/@name='rdp'">
             <a class="ui {$state} mini button" href="../rdp.php?v={$scannedHostAddress}:{$scannedPort/@portid}" title="{$title}">
-                <xsl:value-of select="@name"/>
+                <xsl:value-of select="$serviceName"/>
+            </a>
+        </xsl:when>
+        <xsl:when test="$scannedPort/script[@id='http-info']">
+            <xsl:variable name="status">
+                <xsl:choose>
+                    <xsl:when test="$scannedPort/script[@id='http-info']/elem[@key='status']>=500">red</xsl:when>
+                    <xsl:when test="$scannedPort/script[@id='http-info']/elem[@key='status']>=400">yellow</xsl:when>
+                    <xsl:when test="$scannedPort/script[@id='http-info']/elem[@key='status']>=200">green</xsl:when>
+                    <xsl:otherwise>red</xsl:otherwise>
+                </xsl:choose>
+            </xsl:variable>
+            <a class="ui {$status} mini button" href="{$scannedPort/service/@name}://{$scannedHostAddress}:{$scannedPort/@portid}"  target="_blank"
+            title="{$scannedPort/script[@id='http-info']/elem[@key='title' or @key='status-line']}">
+                <xsl:value-of select="$serviceName"/>
             </a>
         </xsl:when>
         <xsl:when test="$scannedPort/service/@name='ftp' or $scannedPort/service/@name='ssh' or $scannedPort/service/@name='http' or $scannedPort/service/@name='https'">
             <a class="ui {$state} mini button" href="{$scannedPort/service/@name}://{$scannedHostAddress}:{$scannedPort/@portid}"  target="_blank" title="{$title}">
-                <xsl:value-of select="@name"/>
+                <xsl:value-of select="$serviceName"/>
             </a>
         </xsl:when>
         <xsl:otherwise>
             <a class="ui disabled {$state} mini button" title="{$title}">
-                <xsl:value-of select="@name"/>
+                <xsl:value-of select="$serviceName"/>
             </a>
         </xsl:otherwise>
     </xsl:choose>
@@ -178,21 +213,9 @@
 
 
 <xsl:template match="table">
-    <xsl:param name="scannedHost"/>
+    <xsl:param name="scannedHostAddress"/>
-    <xsl:variable name="path">
+    <a class="item share-size" href="file://///{$scannedHostAddress}/{@key}" target="_blank" rel="noopener noreferrer" style="--free: {elem[@key='FreeSize']}; --total: {elem[@key='TotalSize']}">
-        <xsl:choose>
-            <xsl:when test="$scannedHost/hostnames/hostname/@name and contains(@key, $scannedHost/address/@addr)">
-                <xsl:text>\\</xsl:text>
-                <xsl:value-of select="$scannedHost/hostnames/hostname/@name"/>
-                <xsl:value-of select="substring-after(@key, $scannedHost/address/@addr)"/>
-            </xsl:when>
-            <xsl:otherwise>
         <xsl:value-of select="@key"/>
-            </xsl:otherwise>
-        </xsl:choose>
-    </xsl:variable>
-    <a class="item" href="file:///{$path}" target="_blank" rel="noopener noreferrer">
-        <xsl:value-of select="elem[@key='Comment']"/>
     </a>
 </xsl:template>
 

scan.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+if [ "$#" -ne 1 ]; then
+    echo "Usage: ./scan <config>"  >&2
+    exit 1
+fi
+
+pushd "$(dirname -- "$0")" > /dev/null
+site="$(basename ${1/.yml/})"
+
+php "to_XML.php" "configs/$site.yml" > "site/$site.xml" \
+&& eval $(xsltproc "nmap_cmd.xsl" "site/$site.xml") \
+&& mv "scans/$site.xml.tmp" "scans/$site.xml"
+
+popd  > /dev/null

scan_all.php

@@ -1,59 +0,0 @@
-<?php
-set_time_limit(0);
-
-if (! function_exists('str_ends_with')) {
-    function str_ends_with(string $haystack, string $needle): bool {
-        $needle_len = strlen($needle);
-        return ($needle_len === 0 || 0 === substr_compare($haystack, $needle, - $needle_len));
-    }
-}
-
-$__DIR__ = __DIR__;
-
-if (!file_exists("$__DIR__/scans")) mkdir("$__DIR__/scans");
-if (!file_exists("$__DIR__/site")) mkdir("$__DIR__/site");
-
-foreach (scandir("$__DIR__/confs") as $file) {
-    if (str_ends_with($file, ".yaml")) {
-        $site = str_replace(".yaml", "", $file);
-        $yaml = yaml_parse_file("$__DIR__/confs/$file");
-
-        $targets = [];
-        $services = [];
-
-        $xml = new SimpleXMLElement(<<<XML
-<?xml version="1.0"?>
-<?xml-stylesheet href='../results.xsl' type='text/xsl'?>
-<lanScanConf/>
-XML
-);
-        $xml->addAttribute("scanpath", "scans/$site.xml");
-    
-        foreach ($yaml as $key => $value) {
-            if ($key == "site") {
-                $xml->addAttribute("site", $value);
-            } else {
-                $xmlGroup = $xml->addChild("group");
-                $xmlGroup->addAttribute("name", $key);
-                foreach($value as $hostaddress => $servicesList) {
-                    $targets[$hostaddress] = true;
-                    $xmlHost = $xmlGroup->addChild("host");
-                    $xmlHost->addAttribute("address", $hostaddress);
-                    if ($servicesList) foreach ($servicesList as $service) {
-                        $services[$service] = true;
-                        $xmlService = $xmlHost->addChild("service");
-                        $xmlService->addAttribute("name", $service);
-                    }
-                }
-            }
-        }
-
-        $targets = join(array_keys($targets), " ");
-        $services = join(array_keys($services), ",");
-
-        `nmap -v -Pn -p $services --script smb-enum-shares,"$__DIR__/nmap" -oX "$__DIR__/scans/.~$site.xml" $targets && mv "$__DIR__/scans/.~$site.xml" "$__DIR__/scans/$site.xml"`;
-
-        $xml->asXML("$__DIR__/site/$site.xml");
-    }
-}
-?>

scan_all.sh

@@ -1,14 +1,15 @@
 #!/usr/bin/env bash
 
-DIR="$(dirname -- "$0")"
+pushd "$(dirname -- $0)" > /dev/null
 
-mkdir -p "$DIR/scans"
+mkdir -p scans
-mkdir -p "$DIR/site"
+mkdir -p site
 
-for conf in "$DIR/confs/*.yaml"
+for config in configs/*.yml
 do
-    site="basename ${conf/.yaml/}"
+    site="$(basename ${config/.yml/})"
-    php "$DIR/to_xml.php" $conf > "$DIR/site/$site.xml"
+    echo "Scan $site"
-    php "$DIR/nmap_cmd.php" $conf | sh
+    ./scan.sh "$site"
-    mv "$DIR/scans/.~$site.xml" "$DIR/scans/$site.xml"
 done
+
+popd > /dev/null

to_XML.php

@@ -0,0 +1,47 @@
+<?php
+$file = $argv[1];
+$site = basename($file, ".yml");
+$__DIR__ = __DIR__;
+
+$conf = yaml_parse_file($file);
+
+$xml = new DomDocument("1.0", "utf-8");
+$xml->preserveWhiteSpace = false;
+$xml->formatOutput = true;
+$xml->appendChild($xml->createProcessingInstruction("xml-stylesheet", "href='../results.xsl' type='text/xsl'"));
+$root = $xml->appendChild($xml->createElement("lanScan"));
+$root->setAttribute("scanpath", "./scans/$site.xml");
+
+function appendArray($document, $node, $array) {
+    foreach ($array as $key => $value) {
+        if (is_array($value)) {
+            foreach ($value as $vkey => $vvalue) {
+                if (is_string($vkey)) {
+                    if (is_array($vvalue)) {
+                        $child = $document->createElement($vkey);
+                        toXML($document, $child, $vvalue);
+                    } else {
+                        $child = $document->createElement($vkey, $vvalue);
+                    }
+                    $node->appendChild($child);
+                } else {
+                    if (is_array($vvalue)) {
+                        $child = $document->createElement($key);
+                        appendArray($document, $child, $vvalue);
+                    } else {
+                        $child = $document->createElement($key, $vvalue);
+                    }
+                    $node->appendChild($child);
+                }
+                
+            }
+        } else {
+            $node->setAttribute($key, $value);
+        }
+    }
+}
+
+appendArray($xml, $root, $conf);
+
+print $xml->saveXML();
+?>

to_config.xsl

@@ -5,29 +5,34 @@
     version="1.1">
 <xsl:output method="text" encoding="UTF-8" indent="yes" />
 
-<xsl:param name="site" />
+<xsl:param name="network"/>
-<xsl:param name="network" />
 
 <xsl:template match="nmaprun">
 <xsl:text>---
-site: </xsl:text><xsl:value-of select="$site" /><xsl:text>
+site: Nom du site
 
-</xsl:text><xsl:value-of select="$network" /><xsl:text>:
+group:
+  - name: Réseau </xsl:text><xsl:value-of select="$network"/><xsl:text>
+    host:
 </xsl:text>
 <xsl:apply-templates select="host"/>
+<xsl:text>...</xsl:text>
 </xsl:template>
 
 <xsl:template match="host">
-<xsl:text>  </xsl:text>
+<xsl:text>      - address: </xsl:text>
 <xsl:choose>
 <xsl:when test="hostnames/hostname/@name"><xsl:value-of select="hostnames/hostname/@name" /></xsl:when>
 <xsl:otherwise>  <xsl:value-of select="address/@addr" /></xsl:otherwise>
-</xsl:choose>: [<xsl:apply-templates select="ports/port"/>]
+</xsl:choose>
+        service: [<xsl:apply-templates select="ports/port"/>]
 </xsl:template>
 
 <xsl:template match="port">
 <xsl:value-of select="service/@name" />
+<xsl:if test="position() != last()">
 <xsl:text>, </xsl:text>
+</xsl:if>
 </xsl:template>
 
 </xsl:stylesheet>

to_xml.php

@@ -1,32 +0,0 @@
-<?php
-$file = $argv[1];
-$site = basename($file, ".yaml");
-
-$conf = yaml_parse_file($file);
-
-$xml = new SimpleXMLElement(<<<XML
-<?xml version="1.0"?>
-<?xml-stylesheet href='../results.xsl' type='text/xsl'?>
-<lanScanConf scanpath="scans/$site.xml"/>
-XML
-);
-
-foreach ($conf as $key => $value) {
-    if ($key == "site") {
-        $xml->addAttribute("site", $value);
-    } else {
-        $xmlGroup = $xml->addChild("group");
-        $xmlGroup->addAttribute("name", $key);
-        foreach($value as $hostaddress => $servicesList) {
-            $xmlHost = $xmlGroup->addChild("host");
-            $xmlHost->addAttribute("address", $hostaddress);
-            if ($servicesList) foreach ($servicesList as $service) {
-                $xmlService = $xmlHost->addChild("service");
-                $xmlService->addAttribute("name", $service);
-            }
-        }
-    }
-}
-
-echo $xml->asXML();
-?>