Compare commits

..

No commits in common. "664bee12493e1cc30a68028fed9915e92c97c610" and "eae12a8e4ef74862a1830befe557021c2573c127" have entirely different histories.

9 changed files with 27721 additions and 322 deletions

1
.gitignore vendored
View File

@ -1,3 +1,2 @@
scans/ scans/
server.php server.php
test.php

View File

@ -2,8 +2,8 @@
$SCANS_DIR = 'scans'; $SCANS_DIR = 'scans';
$DEFAULT_ARGS = [ $DEFAULT_ARGS = [
'PS' => 'ssh,http,https,msrpc,microsoft-ds', '-PS' => 'ssh,http,https,msrpc,microsoft-ds',
'F' => true, '-F' => true,
'T5' => true, '-T5' => true,
]; ];
$NMAP_DATADIR = '/usr/share/nmap'; $NMAP_DATADIR = '/usr/share/nmap';

View File

@ -1,12 +1,12 @@
<?php <?php
$targets = filter_input(INPUT_GET, 'targets', FILTER_VALIDATE_REGEXP, [ $targets = filter_input(INPUT_GET, 'targets', FILTER_VALIDATE_REGEXP, [
'flags' => FILTER_NULL_ON_FAILURE, 'flags' => FILTER_NULL_ON_FAILURE,
'options' => ['regexp' => "/^[\da-zA-Z-. \/]+$/"], 'options' => ['regexp' => "/^[\da-zA-Z-. \/]+$/"],
]); ]);
$name = filter_input(INPUT_GET, 'name', FILTER_VALIDATE_REGEXP, [ $name = filter_input(INPUT_GET, 'name', FILTER_VALIDATE_REGEXP, [
'flags' => FILTER_NULL_ON_FAILURE, 'flags' => FILTER_NULL_ON_FAILURE,
'options' => ['regexp' => '/^[^<>:"\/|?]+$/'], 'options' => ['regexp' => '/^[^<>:"\/|?]+$/'],
]); ]);
@ -15,97 +15,97 @@ $protocolePortsListRegex = "/^(([TU]:)?[0-9\-]+|[a-z\-]+)(,([TU]:)?[0-9\-]+|,[a-
$portsListRegex = "/^([0-9\-]+|[a-z\-]+)(,[0-9\-]+|,[a-z\-]+)*$/"; $portsListRegex = "/^([0-9\-]+|[a-z\-]+)(,[0-9\-]+|,[a-z\-]+)*$/";
$tempoRegex = "/^\d+[smh]?$/"; $tempoRegex = "/^\d+[smh]?$/";
$options = filter_input_array(INPUT_GET, [ $input_args = filter_input_array(INPUT_GET, [
'iR' => ['filter' => FILTER_VALIDATE_INT], '-iR' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'-exclude' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $hostsListRegex]], '--exclude' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $hostsListRegex]],
'sL' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $hostsListRegex]], '-sL' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $hostsListRegex]],
'sP' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sP' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'P0' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-P0' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'Pn' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-PN' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'PS' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $portsListRegex]], '-PS' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $portsListRegex]],
'PA' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $portsListRegex]], '-PA' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $portsListRegex]],
'PU' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $portsListRegex]], '-PU' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $portsListRegex]],
'PE' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-PE' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'PP' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-PP' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'PM' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-PM' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'PO' => ['filter' => FILTER_VALIDATE_INT, 'options' => ['min_range' => 0, 'max_range' => 255]], '-PO' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['min_range' => 0, 'max_range' => 255]],
'n' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-n' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'R' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-R' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-dns-servers' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $hostsListRegex]], '--dns-servers' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $hostsListRegex]],
'sS' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sS' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'sT' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sT' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'sA' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sA' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'sW' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sW' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'sM' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sM' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'sF' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sF' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'sN' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sN' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'sX' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sX' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'PU' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-PU' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'PM' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-PM' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'PM' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-PM' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'PM' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-PM' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-scanflags' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => "/^([URG|ACK|PSH|RST|SYN|FIN]+)$|^([0-2]?\d?\d)$/"]], '--scanflags' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => "/^([URG|ACK|PSH|RST|SYN|FIN]+)$|^([0-2]?\d?\d)$/"]],
'sI' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => "/^[a-zA-Z\d:.-]+(:\d+)?$/"]], '-sI' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => "/^[a-zA-Z\d:.-]+(:\d+)?$/"]],
'sO' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sO' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'b' => FILTER_VALIDATE_DOMAIN, '-b' => FILTER_VALIDATE_DOMAIN,
'-traceroute' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--traceroute' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-reason' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--reason' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'p' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $portsListRegex]], '-p' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $portsListRegex]],
'F' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-F' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'r' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-r' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-top-ports' => FILTER_VALIDATE_INT, '--top-ports' => FILTER_VALIDATE_INT,
'-port-ratio' => ['filter' => FILTER_VALIDATE_FLOAT, 'options' => ['min_range' => 0, 'max_range' => 1]], '--port-ratio' => ['filter' => FILTER_VALIDATE_FLOAT, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['min_range' => 0, 'max_range' => 1]],
'sV' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-sV' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-version-light' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--version-light' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-version-intensity' => ['filter' => FILTER_VALIDATE_INT, 'options' => ['min_range' => 0, 'max_range' => 9]], '--version-intensity' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['min_range' => 0, 'max_range' => 9]],
'-version-all' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--version-all' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-version-trace' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--version-trace' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'O' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-O' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-osscan-limit' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--osscan-limit' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-osscan-guess' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--osscan-guess' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'T0' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-T0' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'T1' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-T1' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'T2' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-T2' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'T3' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-T3' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'T4' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-T4' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'T5' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-T5' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-min-hostgroup' => ['filter' => FILTER_VALIDATE_INT], '--min-hostgroup' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'-max-hostgroup' => ['filter' => FILTER_VALIDATE_INT], '--max-hostgroup' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'-min-parallelism' => ['filter' => FILTER_VALIDATE_INT], '--min-parallelism' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'-max-parallelism' => ['filter' => FILTER_VALIDATE_INT], '--max-parallelism' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'-min-rtt-timeout' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $tempoRegex]], '--min-rtt-timeout' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $tempoRegex]],
'-max-rtt-timeout' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $tempoRegex]], '--max-rtt-timeout' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $tempoRegex]],
'-initial-rtt-timeout' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $tempoRegex]], '--initial-rtt-timeout' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $tempoRegex]],
'-max-retries' => ['filter' => FILTER_VALIDATE_INT], '--max-retries' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'-host-timeout' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $tempoRegex]], '--host-timeout' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $tempoRegex]],
'-scan-delay' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $tempoRegex]], '--scan-delay' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $tempoRegex]],
'-max-scan-delay' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $tempoRegex]], '--max-scan-delay' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $tempoRegex]],
'f' => ['filter' => FILTER_VALIDATE_INT], '-f' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'mtu' => ['filter' => FILTER_VALIDATE_INT], '-mtu' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'D' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => $hostsListRegex]], '-D' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => $hostsListRegex]],
'S' => ['filter' => FILTER_VALIDATE_IP], '-S' => ['filter' => FILTER_VALIDATE_IP, 'flags' => FILTER_NULL_ON_FAILURE],
'e' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => "/^[a-z\d]+$/"]], '-e' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => "/^[a-z\d]+$/"]],
'g' => ['filter' => FILTER_VALIDATE_INT], '-g' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'-source-port' => ['filter' => FILTER_VALIDATE_INT], '--source-port' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'-data-length' => ['filter' => FILTER_VALIDATE_INT], '--data-length' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE],
'-ip-options' => ['filter' => FILTER_VALIDATE_REGEXP, 'options' => ['regexp' => "/^\"(R|T|U|L [\da-zA-Z-.: ]+|S [\da-zA-Z-.: ]+|\\\\x[\da-fA-F]{1,2}(\*[\d]+)?|\\\\[0-2]?[\d]{1,2}(\*[\d]+)?)\"$/"]], '--ip-options' => ['filter' => FILTER_VALIDATE_REGEXP, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['regexp' => "/^\"(R|T|U|L [\da-zA-Z-.: ]+|S [\da-zA-Z-.: ]+|\\\\x[\da-fA-F]{1,2}(\*[\d]+)?|\\\\[0-2]?[\d]{1,2}(\*[\d]+)?)\"$/"]],
'ttl' => ['filter' => FILTER_VALIDATE_INT, 'options' => ['min_range' => 0, 'max_range' => 255]], '-ttl' => ['filter' => FILTER_VALIDATE_INT, 'flags' => FILTER_NULL_ON_FAILURE, 'options' => ['min_range' => 0, 'max_range' => 255]],
'-spoof-mac' => ['filter' => FILTER_VALIDATE_MAC], '--spoof-mac' => ['filter' => FILTER_VALIDATE_MAC, 'flags' => FILTER_NULL_ON_FAILURE],
'-badsum' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--badsum' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
//'6' => ['filter' => FILTER_VALIDATE_BOOLEAN], //'-6' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'A' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-A' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-send-eth' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--send-eth' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-send-ip' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--send-ip' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-privileged' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--privileged' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'V' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-V' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'-unprivileged' => ['filter' => FILTER_VALIDATE_BOOLEAN], '--unprivileged' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
'h' => ['filter' => FILTER_VALIDATE_BOOLEAN], '-h' => ['filter' => FILTER_VALIDATE_BOOLEAN, 'flags' => FILTER_NULL_ON_FAILURE],
], false) ?: $DEFAULT_ARGS; ], false) ?: $DEFAULT_ARGS;

View File

@ -37,7 +37,7 @@ Exemples: <?=$_SERVER['REMOTE_ADDR']; ?>/24 <?=$_SERVER['SERVER_NAME']; ?> 10.0-
<form class="item" method="get" action="scan-options.php"> <form class="item" method="get" action="scan-options.php">
<input id="hiddenInput" type="hidden" name="targets" value="<?=$targets; ?>"/> <input id="hiddenInput" type="hidden" name="targets" value="<?=$targets; ?>"/>
<input id="hiddenInput" type="hidden" name="name" value="<?=$name; ?>"/> <input id="hiddenInput" type="hidden" name="name" value="<?=$name; ?>"/>
<?='<input type="hidden" name="'.str_replace('=', '" value="', http_build_query($options, '', '/><input type="hidden" name="')).'"/>'; ?> <?='<input type="hidden" name="'.str_replace('=', '" value="', http_build_query($input_args, '', '/><input type="hidden" name="')).'"/>'; ?>
<button class="ui teal submit button" type="submit">Options</button> <button class="ui teal submit button" type="submit">Options</button>
</form> </form>
</div> </div>

27407
nmap/nmap-services Normal file

File diff suppressed because it is too large Load Diff

View File

@ -22,15 +22,14 @@ include_once 'filter_inputs.php';
<body> <body>
<nav class="ui inverted teal fixed menu"> <nav class="ui inverted teal fixed menu">
<a class="header item" href="."> <a class="header item" href=".">
lan<?php include 'logo.svg'; ?>can lan
<?php include 'logo.svg'; ?>can
</a> </a>
</nav> </nav>
<main class="ui main container"> <main class="ui main container">
<h1 class="header">Scanner un réseau avec Nmap</h1>
<form id="newScanForm" class="ui form" method="get" action="scan.php"> <form id="newScanForm" class="ui form" method="get" action="scan.php">
<h1 class="header">Scanner un réseau avec Nmap</h1>
<!--<div class="field"> <!--<div class="field">
<label for="nameInput">Nom</label> <label for="nameInput">Nom</label>
<input id="nameInput" type="text" name="name" placeholder="Réseau local" pattern='[^&lt;&gt;:&quot;\\\/\|@?]+' <input id="nameInput" type="text" name="name" placeholder="Réseau local" pattern='[^&lt;&gt;:&quot;\\\/\|@?]+'
@ -39,8 +38,8 @@ include_once 'filter_inputs.php';
</div>--> </div>-->
<div class="required field"> <div class="required field">
<label for="targetsInput">Cibles</label> <label for="targetsInput">Cibles</label>
<input id="targetsInput" type="text" name="targets" placeholder="Cibles" required <input id="targetsInput" type="text" name="targets" placeholder="Cibles" required=""
pattern="[a-zA-Z0-9._\/ \-]+" value="<?= $targets; ?>" list="targetsList" pattern="[a-zA-Z0-9._\/ \-]+" value="<?= htmlspecialchars($targets); ?>" list="targetsList"
title="Les cibles peuvent être spécifiées par des noms d'hôtes, des adresses IP, des adresses de réseaux, etc. title="Les cibles peuvent être spécifiées par des noms d'hôtes, des adresses IP, des adresses de réseaux, etc.
Exemples: <?=$_SERVER['REMOTE_ADDR']; ?>/24 <?=$_SERVER['SERVER_NAME']; ?> 10.0-255.0-255.1-254" /> Exemples: <?=$_SERVER['REMOTE_ADDR']; ?>/24 <?=$_SERVER['SERVER_NAME']; ?> 10.0-255.0-255.1-254" />
</div> </div>
@ -49,109 +48,117 @@ Exemples: <?=$_SERVER['REMOTE_ADDR']; ?>/24 <?=$_SERVER['SERVER_NAME']; ?> 10.0-
<div class="title"><i class="icon dropdown"></i>Spécification des cibles</div> <div class="title"><i class="icon dropdown"></i>Spécification des cibles</div>
<div class="content"> <div class="content">
<div class="field"> <div class="field">
<label for="excludeInput">Exclure les hôtes ou réseaux</label> <label class="inline field">
<input type="text" id="excludeInput" name="-exclude" placeholder="Hôte/réseau" list="targetsList" <div class="ui checkbox">
pattern="[a-zA-Z0-9._\/,\-]*" value="<?=$options['-exclude']?? "" ?>" <input type="checkbox" id="excludeCheckbox" onchange="excludeInput.disabled = !this.checked"/>
<label for="excludeCheckbox">Exclure les hôtes ou réseaux</label>
</div>
</label>
<input type="text" id="excludeInput" name="--exclude" placeholder="Hôte/réseau" list="targetsList" disabled
pattern="[a-zA-Z0-9._\/,\-]*" value=""
title="Les cibles peuvent être spécifiées par des noms d'hôtes, des adresses IP, des adresses de réseaux, etc. title="Les cibles peuvent être spécifiées par des noms d'hôtes, des adresses IP, des adresses de réseaux, etc.
Exemples: <?=$_SERVER['REMOTE_ADDR']; ?>/24,<?=$_SERVER['SERVER_NAME']; ?>,10.0-255.0-255.1-254"> Exemples: <?=$_SERVER['REMOTE_ADDR']; ?>/24,<?=$_SERVER['SERVER_NAME']; ?>,10.0-255.0-255.1-254">
</div> </div>
</div> </div>
<div class="title"><i class="icon dropdown"></i>Découverte des hôtes actifs</div> <div class="title"><i class="icon dropdown"></i>Découverte des hôtes</div>
<div class="content"> <div class="content">
<div class="inline field"> <div class="inline field">
<div class="ui toggle checkbox"> <div class="ui checkbox">
<input type="checkbox" id="sPCheckbox" name="sP" <?=$options['sP']?? false? 'checked' : ''; ?>/> <input type="checkbox" id="sPCheckbox" name="-sP"/>
<label for="sPCheckbox">N'effectuer que l'étape de découverte des hôtes actifs</label> <label for="sPCheckbox">N'effectuer que la découverte des hôtes actifs</label>
</div> </div>
</div> </div>
<div class="inline field"> <div class="inline field">
<div class="ui toggle checkbox"> <div class="ui checkbox">
<input type="checkbox" id="PnCheckbox" name="Pn" <?=$options['Pn']?? false? 'checked' : ''; ?>/> <input type="checkbox" id="PECheckbox" name="-PE"/>
<label for="PnCheckbox">Considérer tous les hôtes comme actifs (saute la découverte des hôtes)</label> <label for="PECheckbox">Considérer tous les hôtes comme actifs</label>
</div> </div>
</div> </div>
<div class="fields">
<div class="field">
<label for="PSInput">Ping TCP SYN</label>
<input type="text" id="PSInput" name="PS" placeholder="Ports" list="servicesList"
pattern="([0-9\-]+|[a-z\-]+)(,[0-9\-]+|,[a-z\-]+)*" value="<?=$options['PS']?? "" ?>"
title="Liste de ports ex: 22,23,25,80,200-1024,60000-">
</div>
<div class="field">
<label for="PAInput">Ping TCP ACK</label>
<input type="text" id="PAInput" name="PA" placeholder="Ports" list="servicesList"
pattern="([0-9\-]+|[a-z\-]+)(,[0-9\-]+|,[a-z\-]+)*" value="<?=$options['PA']?? "" ?>"
title="Liste de ports ex: 22,23,25,80,200-1024,60000-">
</div>
<div class="field">
<label for="PUInput">Ping UDP</label>
<input type="text" id="PUInput" name="PU" placeholder="Ports" list="servicesList"
pattern="([0-9\-]+|[a-z\-]+)(,[0-9\-]+|,[a-z\-]+)*" value="<?=$options['PU']?? "" ?>"
title="Liste de ports ex: 22,23,25,80,200-1024,60000-">
</div>
</div>
<div class="field"> <div class="field">
<label class="inline field">
<div class="ui checkbox">
<input type="checkbox" id="PSCheckbox" onchange="PSInput.disabled = !this.checked"/>
<label for="PSCheckbox">Ping TCP SYN</label>
</div>
</label>
<input type="text" id="PSInput" name="-PS" placeholder="Ports" list="servicesList" disabled
pattern="([0-9\-]+|[a-z\-]+)(,[0-9\-]+|,[a-z\-]+)*" value="80"
title="Liste de ports ex: 22,23,25,80,113,1050,35000">
</div>
<div class="field">
<label>
<div class="ui checkbox">
<input type="checkbox" id="PACheckbox" onchange="PAInput.disabled = !this.checked"/>
<label for="PACheckbox">Ping TCP ACK</label>
</div>
</label>
<input type="text" id="PAInput" name="-PA" placeholder="Ports" list="servicesList" disabled
pattern="([0-9\-]+|[a-z\-]+)(,[0-9\-]+|,[a-z\-]+)*" value="80"
title="Liste de ports ex: 22,23,25,80,113,1050,35000">
</div>
<div class="field">
<label>
<div class="ui checkbox">
<input type="checkbox" id="PUCheckbox" onchange="PUInput.disabled = !this.checked"/>
<label for="PUCheckbox">Ping UDP</label>
</div>
</label>
<input type="text" id="PUInput" name="-PU" placeholder="Ports" list="servicesList" disabled
pattern="([0-9\-]+|[a-z\-]+)(,[0-9\-]+|,[a-z\-]+)*" value="31338"
title="Liste de ports ex: 22,23,25,80,113,1050,35000">
</div>
<div class="inline fields">
<label>Ping ICMP</label> <label>Ping ICMP</label>
<div class="inline fields"> <div class="field">
<div class="field"> <div class="ui checkbox">
<div class="ui toggle checkbox"> <input type="checkbox" id="PECheckbox" name="-PE"/>
<input type="checkbox" id="PECheckbox" name="PE" <?=$options['PE']?? false? 'checked' : ''; ?>/> <label for="PECheckbox">Echo request</label>
<label for="PECheckbox">Echo request</label>
</div>
</div> </div>
<div class="field"> </div>
<div class="ui toggle checkbox"> <div class="field">
<input type="checkbox" id="PPCheckbox" name="PP" <?=$options['PP']?? false? 'checked' : ''; ?>/> <div class="ui checkbox">
<label for="PPCheckbox">Timestamp request</label> <input type="checkbox" id="PPCheckbox" name="-PP"/>
</div> <label for="PPCheckbox">Timestamp request</label>
</div> </div>
<div class="field"> </div>
<div class="ui toggle checkbox"> <div class="field">
<input type="checkbox" id="PMCheckbox" name="PM" <?=$options['PM']?? false? 'checked' : ''; ?>/> <div class="ui checkbox">
<label for="PMCheckbox">Mask request</label> <input type="checkbox" id="PMCheckbox" name="-PM"/>
</div> <label for="PMCheckbox">Mask request</label>
</div> </div>
</div> </div>
</div> </div>
<div class="field"> <div class="field">
<div class="ui toggle checkbox"> <div class="ui checkbox">
<input type="checkbox" id="PRCheckbox" name="PR" <?=$options['PR']?? false? 'checked' : ''; ?>/> <input type="checkbox" id="PRCheckbox" name="-PR"/>
<label for="PRCheckbox">Ping ARP</label> <label for="PRCheckbox">Ping ARP</label>
</div> </div>
</div> </div>
<div class="field">
<label for="P0Input">Ping IP Protocol</label>
<input type="text" id="P0Input" name="P0" placeholder="Ports"
pattern="[0-9\-]+" value="<?=$options['P0']?? "" ?>"
title="Liste de ports ex: 22,23,25,80,200-1024,60000-">
</div>
</div> </div>
<div class="title"><i class="icon dropdown"></i>Techniques de scan</div> <div class="title"><i class="icon dropdown"></i>Techniques de scan</div>
<div class="content"> <div class="content">
<div class="field"> <div class="field">
<div class="ui toggle checkbox"> <label>
<input type="checkbox" id="FCheckbox" name="F" <?=$options['F']?? false? 'checked' : ''; ?>/> <div class="ui checkbox">
<label for="FCheckbox">Scanner que les ports connus</label> <input type="checkbox" id="pCheckbox" onchange="pInput.disabled = !this.checked"/>
</div> <label for="pCheckbox">Scanner les ports</label>
</div> </div>
</label>
<div class="field"> <input type="text" id="pInput" name="-p" placeholder="Ports" list="servicesList" disabled
<label for="pInput">Scanner que les ports</label> pattern="(([TU]:)?[0-9\-]+|[a-z\-]+)(,([TU]:)?[0-9\-]+|,[a-z\-]+)*" value="1-1024"
<input type="text" id="pInput" name="p" placeholder="Ports" list="servicesList"
pattern="(([TU]:)?[0-9\-]+|[a-z\-]+)(,([TU]:)?[0-9\-]+|,[a-z\-]+)*" value="<?=$options['p']?? "" ?>"
title="Liste de ports ex: ssh,ftp,U:53,111,137,T:21-25,80,139,8080"> title="Liste de ports ex: ssh,ftp,U:53,111,137,T:21-25,80,139,8080">
</div> </div>
<div class="field"> <div class="field">
<div class="ui toggle checkbox"> <div class="ui checkbox">
<input type="checkbox" id="rCheckbox" name="r" <?=$options['r']?? false? 'checked' : ''; ?>/> <input type="checkbox" id="FCheckbox" name="-F"/>
<label for="FCheckbox">Scanner les ports connus</label>
</div>
</div>
<div class="field">
<div class="ui checkbox">
<input type="checkbox" id="rCheckbox" name="-r"/>
<label for="rCheckbox">Ne pas mélanger les ports</label> <label for="rCheckbox">Ne pas mélanger les ports</label>
</div> </div>
</div> </div>
@ -159,7 +166,7 @@ Exemples: <?=$_SERVER['REMOTE_ADDR']; ?>/24,<?=$_SERVER['SERVER_NAME']; ?>,10.0-
</div> </div>
<button type="submit" class="ui teal submit button">Démarrer</button> <button type="submit" class="ui fluid teal submit button">Démarrer</button>
</form> </form>
<datalist id='targetsList'> <datalist id='targetsList'>
@ -171,7 +178,7 @@ if (!file_exists($SCANS_DIR)) {
mkdir($SCANS_DIR); mkdir($SCANS_DIR);
} }
foreach (scandir($SCANS_DIR) as $scan) { foreach (scandir($SCANS_DIR) as $scan) {
if ('.xml' == substr($scan, -4)) { if (substr($scan, -4) == '.xml') {
$targets = str_replace('!', '/', substr_replace($scan, '', -4)); $targets = str_replace('!', '/', substr_replace($scan, '', -4));
echo " <option value='$targets'></option>\n"; echo " <option value='$targets'></option>\n";
} }
@ -183,12 +190,12 @@ foreach (scandir($SCANS_DIR) as $scan) {
$nmap_services = file("$NMAP_DATADIR/nmap-services"); $nmap_services = file("$NMAP_DATADIR/nmap-services");
$services = []; $services = [];
foreach ($nmap_services as $service) { foreach ($nmap_services as $service) {
if (0 !== strpos($service, '#')) { if (strpos($service, '#') !== 0) {
[$name, $port] = explode("\t", $service); [$name, $port] = explode("\t", $service);
$services[$name] = explode("/", $port); $services[$name] = $port;
} }
} }
foreach ($services as $name => [$portid, $protocol]) { foreach ($services as $name => $port) {
echo " <option value='$name'></option>\n"; echo " <option value='$name'></option>\n";
} }
?> ?>
@ -202,46 +209,61 @@ const joinWithCommas = tags => tags.map(tag => tag.value).join(',')
$('.ui.accordion').accordion() $('.ui.accordion').accordion()
new Tagify(targetsInput, { var targetsTagify = new Tagify(targetsInput, {
delimiters: " |,", delimiters: " |,",
originalInputValueFormat: joinWithSpaces, originalInputValueFormat: joinWithSpaces,
whitelist: targetsWhitelist, whitelist: targetsWhitelist,
}) })
new Tagify(excludeInput, { var excludeTagify = new Tagify(excludeInput, {
delimiters: " |,", delimiters: " |,",
originalInputValueFormat: joinWithCommas, originalInputValueFormat: joinWithCommas,
whitelist: targetsWhitelist, whitelist: targetsWhitelist,
}) })
excludeCheckbox.onchange = (event) => {
excludeInput.disabled = !excludeCheckbox.checked
excludeTagify.setDisabled(!excludeCheckbox.checked)
}
new Tagify(PSInput, { var PSTagify = new Tagify(PSInput, {
delimiters: " |,", delimiters: " |,",
originalInputValueFormat: joinWithCommas, originalInputValueFormat: joinWithCommas,
whitelist: servicesWhitelist, whitelist: servicesWhitelist,
}) })
PSCheckbox.onchange = () => {
PSInput.disabled = !PSCheckbox.checked
PSTagify.setDisabled(!PSCheckbox.checked)
}
new Tagify(PAInput, { var PATagify = new Tagify(PAInput, {
delimiters: " |,", delimiters: " |,",
originalInputValueFormat: joinWithCommas, originalInputValueFormat: joinWithCommas,
whitelist: servicesWhitelist, whitelist: servicesWhitelist,
}) })
PACheckbox.onchange = () => {
PAInput.disabled = !PACheckbox.checked
PATagify.setDisabled(!PACheckbox.checked)
}
new Tagify(PUInput, { var PUTagify = new Tagify(PUInput, {
delimiters: " |,", delimiters: " |,",
originalInputValueFormat: joinWithCommas, originalInputValueFormat: joinWithCommas,
whitelist: servicesWhitelist, whitelist: servicesWhitelist,
}) })
PUCheckbox.onchange = () => {
PUInput.disabled = !PUCheckbox.checked
PUTagify.setDisabled(!PUCheckbox.checked)
}
new Tagify(P0Input, { var pTagify = new Tagify(pInput, {
delimiters: " |,",
originalInputValueFormat: joinWithCommas
})
new Tagify(pInput, {
delimiters: " |,", delimiters: " |,",
originalInputValueFormat: joinWithCommas, originalInputValueFormat: joinWithCommas,
whitelist: servicesWhitelist, whitelist: servicesWhitelist,
}) })
pCheckbox.onchange = () => {
pInput.disabled = !pCheckbox.checked
pTagify.setDisabled(!pCheckbox.checked)
}
newScanForm.onsubmit = function (event) { newScanForm.onsubmit = function (event) {
if (this.checkValidity()) { if (this.checkValidity()) {

View File

@ -5,7 +5,7 @@ include_once 'filter_inputs.php';
if (!$targets) { if (!$targets) {
http_response_code(400); http_response_code(400);
die('Paramètre manquant : targets'); exit('Paramètre manquant : targets');
} }
if (!file_exists($SCANS_DIR)) { if (!file_exists($SCANS_DIR)) {
@ -14,21 +14,9 @@ if (!file_exists($SCANS_DIR)) {
$basedir = "{$_SERVER['REQUEST_SCHEME']}://{$_SERVER['SERVER_NAME']}:{$_SERVER['SERVER_PORT']}".dirname($_SERVER['REQUEST_URI']); $basedir = "{$_SERVER['REQUEST_SCHEME']}://{$_SERVER['SERVER_NAME']}:{$_SERVER['SERVER_PORT']}".dirname($_SERVER['REQUEST_URI']);
$args = ''; $args = str_replace('=', ' ', http_build_query($input_args, '', ' '));
foreach ($options as $arg => $value) {
if (is_null($value)) {
http_response_code(400);
exit("Valeur incorecte pour le paramètre $option : ".filter_input(INPUT_GET, $option, FILTER_SANITIZE_FULL_SPECIAL_CHARS));
} else if ($value) {
if ($value === true) {
$args .= " -$arg";
} else {
$arg .= " -$arg ".escapeshellarg($value);
}
}
}
$result = `nmap$args --stylesheet $basedir/stylesheet.xsl -oX - $targets`; $result = `nmap $args --stylesheet $basedir/stylesheet.xsl -oX - $targets`;
if (!$result) { if (!$result) {
http_response_code(500); http_response_code(500);
exit(); exit();
@ -45,9 +33,7 @@ if (!file_exists($SCANS_DIR)) {
$path = "$SCANS_DIR/".str_replace('/', '!', $targets).'.xml'; $path = "$SCANS_DIR/".str_replace('/', '!', $targets).'.xml';
if (!file_exists($path)) { if (!file_exists($path)) {
$xml->insertBefore($xml->createProcessingInstruction('xslt-param', "name='compareWith' value=''"), $xml->documentElement); $xml->insertBefore($xml->createProcessingInstruction('xslt-param', "name='compareWith' value=''"), $xml->documentElement);
$xml-> $xml->save($path);
save($path);
} else { } else {
$xml->insertBefore($xml->createProcessingInstruction('xslt-param', "name='compareWith' value='$path'"), $xml->documentElement); $xml->insertBefore($xml->createProcessingInstruction('xslt-param', "name='compareWith' value='$path'"), $xml->documentElement);
} }

View File

@ -1,31 +1,27 @@
<?xml version="1.0" encoding="utf-8"?> <?xml version="1.0" encoding="utf-8"?>
<xsl:stylesheet <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:xs="http://www.w3.org/2001/XMLSchema" version="2.0">
xmlns:xs="http://www.w3.org/2001/XMLSchema" <xsl:output method="html" encoding="UTF-8" />
version="1.1"> <xsl:output indent="yes" />
<xsl:strip-space elements='*' />
<xsl:output method="html" encoding="UTF-8"/> <xsl:param name="compareWith" />
<xsl:output indent="yes"/> <xsl:variable name="current" select="./nmaprun" />
<xsl:strip-space elements='*'/> <xsl:variable name="init" select="document(string($compareWith))/nmaprun" />
<xsl:param name="compareWith"/>
<xsl:variable name="current" select="./nmaprun"/>
<xsl:variable name="init" select="document(string($compareWith))/nmaprun"/>
<xsl:template match="nmaprun"> <xsl:template match="nmaprun">
<xsl:variable name="targets" select="substring-after(./@args, '-oX - ')"/> <xsl:variable name="targets" select="substring-after(./@args, '-oX - ')"/>
<xsl:variable name="basedir" select="substring-before(substring-after(./@args, '--stylesheet '), '/stylesheet.xsl')"/> <xsl:variable name="basedir" select="substring-before(substring-after(./@args, '--stylesheet '), '/stylesheet.xsl')"/>
<html lang="fr"> <html lang="fr">
<head> <head>
<meta charset="utf-8"/> <meta charset="utf-8" />
<meta http-equiv="refresh" content="60"/> <meta http-equiv="refresh" content="60" />
<title>lanScan - <xsl:value-of select="$targets"/> <title>lanScan - <xsl:value-of select="$targets" />
</title> </title>
<link rel="icon" href="favicon.ico"/> <link rel="icon" href="favicon.ico" />
<link rel="stylesheet" type="text/css" href="https://cdn.jsdelivr.net/npm/fomantic-ui@2.9.3/dist/semantic.min.css"/> <link rel="stylesheet" type="text/css" href="https://cdn.jsdelivr.net/npm/fomantic-ui@2.9.3/dist/semantic.min.css" />
<link href="https://cdn.jsdelivr.net/npm/@yaireo/tagify/dist/tagify.css" rel="stylesheet" type="text/css"/> <link href="https://cdn.jsdelivr.net/npm/@yaireo/tagify/dist/tagify.css" rel="stylesheet" type="text/css" />
<link href="https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.1.8/b-3.1.2/b-html5-3.1.2/b-print-3.1.2/fh-4.0.1/r-3.0.3/datatables.css" rel="stylesheet"/> <link href="https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.1.8/b-3.1.2/b-html5-3.1.2/b-print-3.1.2/fh-4.0.1/r-3.0.3/datatables.css" rel="stylesheet" />
<link href="style.css" rel="stylesheet" type="text/css"/> <link href="style.css" rel="stylesheet" type="text/css" />
<script src="https://code.jquery.com/jquery-3.7.1.js"></script> <script src="https://code.jquery.com/jquery-3.7.1.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/fomantic-ui/2.9.2/semantic.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/fomantic-ui/2.9.2/semantic.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/@yaireo/tagify"></script> <script src="https://cdn.jsdelivr.net/npm/@yaireo/tagify"></script>
@ -42,31 +38,31 @@
<svg class="logo" version="1.1" id="Layer_1" x="0px" y="0px" viewBox="0 0 24 24" xml:space="preserve" width="40" height="40" <svg class="logo" version="1.1" id="Layer_1" x="0px" y="0px" viewBox="0 0 24 24" xml:space="preserve" width="40" height="40"
xmlns="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg"
xmlns:svg="http://www.w3.org/2000/svg"> xmlns:svg="http://www.w3.org/2000/svg">
<defs id="defs206"/> <defs id="defs206" />
<g id="g998" transform="matrix(0,0.04687491,-0.04687491,0,24,2.2682373e-5)"> <g id="g998" transform="matrix(0,0.04687491,-0.04687491,0,24,2.2682373e-5)">
<g id="g147"> <g id="g147">
<g id="g145"> <g id="g145">
<path d="m 322.065,92.046 c -46.24,0 -83.851,37.619 -83.851,83.857 v 168.712 c 0,25.224 -21.148,45.745 -46.372,45.745 -25.224,0 -46.372,-20.521 -46.372,-45.745 V 199.464 h -38.114 v 145.151 c 0,46.24 38.246,83.859 84.486,83.859 46.24,0 84.486,-37.619 84.486,-83.859 V 175.903 c 0,-25.223 20.514,-45.743 45.737,-45.743 25.223,0 45.737,20.521 45.737,45.743 v 134.092 h 38.114 V 175.903 c 0,-46.239 -37.611,-83.857 -83.851,-83.857 z" id="path143"/> <path d="m 322.065,92.046 c -46.24,0 -83.851,37.619 -83.851,83.857 v 168.712 c 0,25.224 -21.148,45.745 -46.372,45.745 -25.224,0 -46.372,-20.521 -46.372,-45.745 V 199.464 h -38.114 v 145.151 c 0,46.24 38.246,83.859 84.486,83.859 46.24,0 84.486,-37.619 84.486,-83.859 V 175.903 c 0,-25.223 20.514,-45.743 45.737,-45.743 25.223,0 45.737,20.521 45.737,45.743 v 134.092 h 38.114 V 175.903 c 0,-46.239 -37.611,-83.857 -83.851,-83.857 z" id="path143" />
</g> </g>
</g> </g>
<g id="g153"> <g id="g153">
<g id="g151"> <g id="g151">
<path d="M 144.198,0 H 108.625 C 98.101,0 89.568,8.746 89.568,19.271 c 0,1.157 0.121,2.328 0.318,3.598 h 73.052 c 0.197,-1.27 0.318,-2.441 0.318,-3.598 C 163.256,8.746 154.723,0 144.198,0 Z" id="path149"/> <path d="M 144.198,0 H 108.625 C 98.101,0 89.568,8.746 89.568,19.271 c 0,1.157 0.121,2.328 0.318,3.598 h 73.052 c 0.197,-1.27 0.318,-2.441 0.318,-3.598 C 163.256,8.746 154.723,0 144.198,0 Z" id="path149" />
</g> </g>
</g> </g>
<g id="g159"> <g id="g159">
<g id="g157"> <g id="g157">
<path d="m 420.183,486.591 h -71.731 c -0.626,2.541 -0.978,4.077 -0.978,6.176 0,10.525 8.532,19.234 19.057,19.234 h 35.573 c 10.525,0 19.057,-8.709 19.057,-19.234 0,-2.098 -0.352,-3.635 -0.978,-6.176 z" id="path155"/> <path d="m 420.183,486.591 h -71.731 c -0.626,2.541 -0.978,4.077 -0.978,6.176 0,10.525 8.532,19.234 19.057,19.234 h 35.573 c 10.525,0 19.057,-8.709 19.057,-19.234 0,-2.098 -0.352,-3.635 -0.978,-6.176 z" id="path155" />
</g> </g>
</g> </g>
<g id="g165"> <g id="g165">
<g id="g163"> <g id="g163">
<rect x="87.027" y="41.925999" width="80.040001" height="138.481" id="rect161"/> <rect x="87.027" y="41.925999" width="80.040001" height="138.481" id="rect161" />
</g> </g>
</g> </g>
<g id="g171"> <g id="g171">
<g id="g169"> <g id="g169">
<rect x="344.93301" y="329.052" width="80.040001" height="138.481" id="rect167"/> <rect x="344.93301" y="329.052" width="80.040001" height="138.481" id="rect167" />
</g> </g>
</g> </g>
<g id="g173"></g> <g id="g173"></g>
@ -112,15 +108,23 @@ Exemples: 192.168.1.0/24 scanme.nmap.org 10.0-255.0-255.1-254"/>
<i class="exclamation triangle icon"></i> <i class="exclamation triangle icon"></i>
<div class="content"> <div class="content">
<div class="header" style="text-transform: capitalize"> <div class="header" style="text-transform: capitalize">
<xsl:value-of select="runstats/finished/@exit"/> <xsl:value-of select="runstats/finished/@exit" />
</div> </div>
<p> <p>
<xsl:value-of select="runstats/finished/@errormsg"/> <xsl:value-of select="runstats/finished/@errormsg" />
</p> </p>
</div> </div>
</div> </div>
</xsl:if> </xsl:if>
<xsl:if test="$init">
<div class="ui info message">
<i class="calendar icon"></i>
<xsl:text>Comparaison avec le scan de </xsl:text>
<xsl:value-of select="$init/runstats/finished/@timestr" />
</div>
</xsl:if>
<table id="scanResultsTable" style="width:100%" role="grid" class="ui sortable small table"> <table id="scanResultsTable" style="width:100%" role="grid" class="ui sortable small table">
<thead> <thead>
<tr> <tr>
@ -131,72 +135,46 @@ Exemples: 192.168.1.0/24 scanme.nmap.org 10.0-255.0-255.1-254"/>
</tr> </tr>
</thead> </thead>
<tbody> <tbody>
<xsl:apply-templates select="host | $init/host[not(address/@addr = $current/host/address/@addr)]"/> <xsl:apply-templates select="host | $init/host[not(address/@addr = $current/host/address/@addr)]" />
</tbody> </tbody>
<caption>
<xsl:value-of select="runstats/finished/@summary" />
</caption>
</table> </table>
</main> </main>
<script> <script>
DataTable.ext.type.detect.unshift(function (d) { DataTable.ext.type.detect.unshift(function (d) {
return /[\d]+\.[\d]+\.[\d]+\.[\d]+/.test(d) return /[\d]+\.[\d]+\.[\d]+\.[\d]+/.test(d)
? 'ipv4-address' ? 'ipv4-address'
: null; : null;
}); });
DataTable.ext.type.order['ipv4-address-pre'] = function (ipAddress) { DataTable.ext.type.order['ipv4-address-pre'] = function (ipAddress) {
[a, b, c, d] = ipAddress.split(".").map(Number) [a, b, c, d] = ipAddress.split(".").map(s => Number(s))
return 16777216*a + 65536*b + 256*c + d; return 16777216*a + 65536*b + 256*c + d;
}; };
var table = $('#scanResultsTable').DataTable({ var table = $('#scanResultsTable').DataTable({
buttons: ['copy', 'excel', 'pdf'], buttons: ['copy', 'excel', 'pdf'],
fixedHeader: true, fixedHeader: true,
lengthMenu: [ lengthMenu: [
[256, 512, 1024, 2048, -1], [256, 512, 1024, 2048, -1],
[256, 512, 1024, 2048, "All"] [256, 512, 1024, 2048, "All"]
], ],
responsive: true, responsive: true,
}) })
table.order([1, 'asc']).draw() table.order([1, 'asc']).draw()
$('.ui.dropdown').dropdown() $('.ui.dropdown').dropdown()
<xsl:if test="$init">
$.toast({
message: 'Comparaison avec les résultats du <xsl:value-of select="$init/runstats/finished/@timestr"/>',
class: 'info',
showIcon: 'calendar',
displayTime: 10000,
closeIcon: true,
})
</xsl:if>
<xsl:if test="runstats/finished/@summary">
$.toast({
title: '<xsl:value-of select="runstats/finished/@exit"/>',
message: '<xsl:value-of select="runstats/finished/@summary"/>',
showIcon: 'satellite dish',
displayTime: 'auto',
closeIcon: true,
})
</xsl:if>
<xsl:if test="runstats/finished/@errormsg">
$.toast({
title: '<xsl:value-of select="runstats/finished/@exit"/>',
message: '<xsl:value-of select="runstats/finished/@errormsg"/>',
showIcon: 'exclamation triangle',
class: 'error',
displayTime: 'auto',
closeIcon: true,
})
</xsl:if>
</script> </script>
</body> </body>
</html> </html>
</xsl:template> </xsl:template>
<xsl:template match="host"> <xsl:template match="host">
<xsl:variable name="addr" select="address/@addr"/> <xsl:variable name="addr" select="address/@addr" />
<xsl:variable name="initHost" select="$init/host[address/@addr=$addr]"/> <xsl:variable name="initHost" select="$init/host[address/@addr=$addr]" />
<xsl:variable name="currentHost" select="$current/host[address/@addr=$addr]"/> <xsl:variable name="currentHost" select="$current/host[address/@addr=$addr]" />
<tr> <tr>
<xsl:attribute name="class"> <xsl:attribute name="class">
<xsl:choose> <xsl:choose>
@ -207,17 +185,17 @@ $.toast({
<td> <td>
<xsl:choose> <xsl:choose>
<xsl:when test="$currentHost"> <xsl:when test="$currentHost">
<xsl:value-of select="$currentHost/status/@state"/> <xsl:value-of select="$currentHost/status/@state" />
</xsl:when> </xsl:when>
<xsl:otherwise>down</xsl:otherwise> <xsl:otherwise>down</xsl:otherwise>
</xsl:choose> </xsl:choose>
</td> </td>
<td> <td>
<xsl:value-of select="address/@addr"/> <xsl:value-of select="address/@addr" />
</td> </td>
<td> <td>
<b> <b>
<xsl:value-of select="hostnames/hostname/@name"/> <xsl:value-of select="hostnames/hostname/@name" />
</b> </b>
</td> </td>
<td> <td>
@ -225,28 +203,28 @@ $.toast({
<xsl:with-param name="hostAddress"> <xsl:with-param name="hostAddress">
<xsl:choose> <xsl:choose>
<xsl:when test="hostnames/hostname/@name"> <xsl:when test="hostnames/hostname/@name">
<xsl:value-of select="hostnames/hostname/@name"/> <xsl:value-of select="hostnames/hostname/@name" />
</xsl:when> </xsl:when>
<xsl:otherwise> <xsl:otherwise>
<xsl:value-of select="address/@addr"/> <xsl:value-of select="address/@addr" />
</xsl:otherwise> </xsl:otherwise>
</xsl:choose> </xsl:choose>
</xsl:with-param> </xsl:with-param>
<xsl:with-param name="initHost" select="$initHost"/> <xsl:with-param name="initHost" select="$initHost" />
<xsl:with-param name="currentHost" select="$currentHost"/> <xsl:with-param name="currentHost" select="$currentHost" />
<xsl:sort select="@portid" order="ascending"/> <xsl:sort select="@portid" order="ascending" />
</xsl:apply-templates> </xsl:apply-templates>
</td> </td>
</tr> </tr>
</xsl:template> </xsl:template>
<xsl:template match="port"> <xsl:template match="port">
<xsl:param name="hostAddress"/> <xsl:param name="hostAddress" />
<xsl:param name="initHost"/> <xsl:param name="initHost" />
<xsl:param name="currentHost"/> <xsl:param name="currentHost" />
<xsl:variable name="portid" select="@portid"/> <xsl:variable name="portid" select="@portid" />
<xsl:variable name="initPort" select="$initHost/ports/port[@portid=$portid]"/> <xsl:variable name="initPort" select="$initHost/ports/port[@portid=$portid]" />
<xsl:variable name="currentPort" select="$currentHost/ports/port[@portid=$portid]"/> <xsl:variable name="currentPort" select="$currentHost/ports/port[@portid=$portid]" />
<a class="ui label" target="_blank"> <a class="ui label" target="_blank">
<xsl:attribute name="class"> <xsl:attribute name="class">
@ -266,40 +244,42 @@ $.toast({
</xsl:attribute> </xsl:attribute>
<xsl:if test="service/@name='ftp' or service/@name='ssh' or service/@name='http' or service/@name='https'"> <xsl:if test="service/@name='ftp' or service/@name='ssh' or service/@name='http' or service/@name='https'">
<xsl:attribute name="href"> <xsl:attribute name="href">
<xsl:value-of select="service/@name"/> <xsl:value-of select="service/@name" />
:// <xsl:value-of select="$hostAddress"/> :// <xsl:value-of select="$hostAddress" />
: <xsl:value-of select="@portid"/> : <xsl:value-of select="@portid" />
</xsl:attribute> </xsl:attribute>
</xsl:if> </xsl:if>
<xsl:if test="service/@name='ms-wbt-server'"> <xsl:if test="service/@name='ms-wbt-server'">
<xsl:attribute name="href">rdp.php?v=<xsl:value-of select="$hostAddress"/> <xsl:attribute name="href">rdp.php?v=<xsl:value-of select="$hostAddress" />
&amp;p=<xsl:value-of select="@portid"/> &amp;p=<xsl:value-of select="@portid" />
</xsl:attribute> </xsl:attribute>
</xsl:if> </xsl:if>
<xsl:value-of select="service/@name"/> <xsl:if test="(service/@name='microsoft-ds' or service/@name='netbios-ssn') and ../../hostscript/script[@id='smb-shares-size']/table">
<xsl:attribute name="style">
<xsl:for-each select="$currentHost/hostscript/script[@id='smb-shares-size']/table">
<xsl:sort select="elem[@key='FreeSize'] div elem[@key='TotalSize']" order="ascending" />
<xsl:if test="position()=1">
<xsl:text>--free: </xsl:text>
<xsl:value-of select="elem[@key='FreeSize']" />
<xsl:text>; --total: </xsl:text>
<xsl:value-of select="elem[@key='TotalSize']" />
</xsl:if>
</xsl:for-each>
</xsl:attribute>
</xsl:if>
<xsl:value-of select="service/@name" />
<div class="detail"> <div class="detail">
<xsl:choose> <xsl:choose>
<xsl:when test="@protocol='udp'">U:</xsl:when> <xsl:when test="@protocol='udp'">U:</xsl:when>
<xsl:otherwise>:</xsl:otherwise> <xsl:otherwise>:</xsl:otherwise>
</xsl:choose> </xsl:choose>
<xsl:value-of select="@portid"/> <xsl:value-of select="@portid" />
</div> </div>
<xsl:if test="(service/@name='microsoft-ds' or service/@name='netbios-ssn') and ../../hostscript/script[@id='smb-shares-size']/table"> <xsl:if test="(service/@name='microsoft-ds' or service/@name='netbios-ssn') and ../../hostscript/script[@id='smb-shares-size']/table">
<xsl:attribute name="style">
<xsl:for-each select="$currentHost/hostscript/script[@id='smb-shares-size']/table">
<xsl:sort select="elem[@key='FreeSize'] div elem[@key='TotalSize']" order="ascending"/>
<xsl:if test="position()=1">
<xsl:text>--free: </xsl:text>
<xsl:value-of select="elem[@key='FreeSize']"/>
<xsl:text>; --total: </xsl:text>
<xsl:value-of select="elem[@key='TotalSize']"/>
</xsl:if>
</xsl:for-each>
</xsl:attribute>
<i class="dropdown icon"></i> <i class="dropdown icon"></i>
<div class="menu"> <div class="menu">
<xsl:apply-templates select="$currentHost/hostscript/script[@id='smb-shares-size']/table"> <xsl:apply-templates select="$currentHost/hostscript/script[@id='smb-shares-size']/table">
<xsl:with-param name="hostAddress" select="$hostAddress"/> <xsl:with-param name="hostAddress" select="$hostAddress" />
</xsl:apply-templates> </xsl:apply-templates>
</div> </div>
</xsl:if> </xsl:if>
@ -307,9 +287,9 @@ $.toast({
</xsl:template> </xsl:template>
<xsl:template match="table"> <xsl:template match="table">
<xsl:param name="hostAddress"/> <xsl:param name="hostAddress" />
<a class="item share-size" href="file://///{$hostAddress}/{@key}" target="_blank" rel="noopener noreferrer" style="--free: {elem[@key='FreeSize']}; --total: {elem[@key='TotalSize']}"> <a class="item share-size" href="file://///{$hostAddress}/{@key}" target="_blank" rel="noopener noreferrer" style="--free: {elem[@key='FreeSize']}; --total: {elem[@key='TotalSize']}">
<xsl:value-of select="@key"/> <xsl:value-of select="@key" />
</a> </a>
</xsl:template> </xsl:template>
</xsl:stylesheet> </xsl:stylesheet>

5
test.php Normal file
View File

@ -0,0 +1,5 @@
<?php
include_once 'filter_inputs.php';
var_dump($input_args);