Push strikeback package

author: Tom Schaefer <tom@tomschaefer.org> 2011-05-27 23:07:11 -0400
committer: Tom Schaefer <tom@tomschaefer.org> 2011-05-27 23:07:11 -0400
commit: 0d0402fbfd69a2978d43e7551319ba970a2d77ef (patch)
tree: 005f8181ac8c5e7470441a8e4a3a19b0edabda42 /config/strikeback/parse.tmp
parent: 51e31652e2c03e4de2c852cefc637bf394df359b (diff)
download: pfsense-packages-0d0402fbfd69a2978d43e7551319ba970a2d77ef.tar.gz
pfsense-packages-0d0402fbfd69a2978d43e7551319ba970a2d77ef.tar.bz2
pfsense-packages-0d0402fbfd69a2978d43e7551319ba970a2d77ef.zip
1 files changed, 289 insertions, 0 deletions
diff --git a/config/strikeback/parse.tmp b/config/strikeback/parse.tmp
new file mode 100644
index 00000000..085a73fb
--- /dev/null
+++ b/config/strikeback/parse.tmp
@@ -0,0 +1,289 @@
+#!/usr/local/bin/php
+<?php
+/**
+ * Script to transform multiple nmap XML output files (presumably of the same host/port range with different scan options) into a HTML table
+ *
+ * The canonical source of the latest version of this script is:
+ *  <http://svn.jasonantman.com/misc-scripts/nmap-xml-to-table.php>
+ *
+ * Copyright 2011 Jason Antman <jason@jasonantman.com> <http://www.jasonantman.com> all rights reserved.
+ *  Distribution and use of this script is unlimited, provided that you leave this notice intact and send any corrections/additions back to me.
+ *
+ * This is assuming a relatively simple scan - only one protocol, one or more hosts, one or more ports, and that different scans will be differentiated only by type
+ *
+ * USAGE: nmap-xml-to-table.php [xml file] [xml file] [...]
+ *
+ * $LastChangedRevision$
+ * $HeadURL$
+ *
+ */
+header("Cache-Control: no-cache, must-revalidate"); // HTTP/1.1
+header("Expires: Sat, 26 Jul 1997 05:00:00 GMT"); // Date in the past
+
+exec("mkdir /usr/local/www/packages/strikeback/reports");
+
+$dir = 'reports/';
+$reports = scandir($dir);
+//print_r($reports);
+
+foreach($reports as $i => $value){
+	$reports[$i] = "reports/".$reports[$i];	
+	$i++;
+}
+
+array_shift($reports);
+array_shift($reports);
+//print_r($reports);
+//array_shift($argv); // get rid of script name
+
+
+
+
+//print_r($reports);
+$files = array();
+//foreach($argv as $file)
+foreach($reports as $file)
+{
+  if(file_exists($file) && is_readable($file))
+    {
+      $files[] = $file;
+    }
+  else
+    {
+      fwrite(STDERR, "File $file does not exist or is not readable, skipping.\n");
+    }
+}
+
+$results = array();
+$scanInfo = array();
+$hostAndPort = array();
+
+$count = 0;
+foreach($files as $file)
+{
+  $info = getScanResults($file);
+  $results[$count] = $info['hosts'];
+  $info['scan']['filename'] = $file;
+  $scanInfo[$count] = $info['scan'];
+  foreach($info['hosts'] as $host => $portArr)
+    {
+      if(! isset($hostAndPort[$host])){ $hostAndPort[$host] = array();}
+      foreach($portArr as $port => $foo)
+	{
+	  $hostAndPort[$host][$port] = $foo['service'];
+	}
+    }
+  $count++;
+}
+
+?>
+
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
+<title>Condensed NMAP scan results</title>
+
+<style type="text/css">
+table.result {
+  border-width: 1px 1px 1px 1px;
+  border-spacing: 0px;
+  border-style: solid solid solid solid;
+  border-color: black black black black;
+  border-collapse: separate;
+  background-color: white;
+  margin-left: auto;
+  margin-right: auto;
+}
+table.result th {
+  border-width: 1px 1px 1px 1px;
+ padding: 2px 2px 2px 2px;
+  border-style: solid solid solid solid;
+  border-color: black black black black;
+  background-color: white;
+  -moz-border-radius: 0px 0px 0px 0px;
+}
+table.result td {
+  border-width: 1px 1px 1px 1px;
+ padding: 2px 2px 2px 2px;
+  border-style: solid solid solid solid;
+  border-color: black black black black;
+  background-color: white;
+  -moz-border-radius: 0px 0px 0px 0px;
+}
+h2 { text-align: center;}
+.lookhere { color: red;}
+</style>
+<script type="text/javascript" language="javascript">
+function show_hide(show) {
+<?php
+$tableint = 0;
+foreach($scanInfo as $num => $arr)
+{
+	$tableint++;
+
+	echo "if (tbl = document.getElementById(\"td".$tableint."\")) {\n"; 
+	echo "if (null == show) show = tbl.style.display == 'none';\n"; 
+	echo "tbl.style.display = (show ? '' : 'none');\n"; 
+	echo "}\n"; 
+	
+	echo "if (tbl = document.getElementById(\"th".$tableint."\")) {\n"; 
+	echo "if (null == show) show = tbl.style.display == 'none';\n"; 
+	echo "tbl.style.display = (show ? '' : 'none');\n"; 
+	echo "}\n"; 	
+}
+?>
+}
+</script>
+</head>
+<body>
+<h2>Nmap scan results (condensed)</h2>
+<a href="javascript:void();" onclick="show_hide()">Show/Hide scanned services</a>
+<?php
+
+// output scan information
+echo '<table class="result">'."\n";
+echo '<tr><th colspan="7">Scans</th></tr>'."\n";
+//echo '<tr><th>Num</th><th>proto</th><th>type</th><th>Services</th><th>num hosts</th><th>command</th><th>filename</th></tr>'."\n";
+echo '<tr><th>Num</th><th>proto</th><th>type</th><th id="th'.$tableint.'" style="display:none;">Services</th><th>filename</th><th>Delete</th></tr>'."\n";
+
+if(isset($_GET[delete])) {
+	echo($_GET[delete]);
+	
+	
+	exec("rm ".$_GET[delete]);
+	unlink($_GET[delete]);
+	
+	
+	echo "<script type=\"text/javascript\">\n"; 
+	echo "<!--\n"; 
+	echo "window.location = \"parse.php\"\n"; 
+	echo "//-->\n"; 
+	echo "<\/script>\n";	
+	
+}
+
+$tableint = 0;
+foreach($scanInfo as $num => $arr)
+{
+	$tableint++;
+	//echo($tableint);
+  //echo '<tr><td>'.$num.'</td><td>'.$arr['protocol'].'</td><td>'.$arr['type'].'</td><td>'.$arr['services'].'</td><td>'.$arr['numHosts'].'</td><td><pre>'.$arr['command'].'</pre></td><td>'.$arr['filename'].'</td></tr>'."\n";
+  echo '<tr><td>'.$num.'</td><td>'.$arr['protocol'].'</td><td>'.$arr['type'].'</td><td id="td'.$tableint.'" style="display:none;">'.$arr['services'].'</td><td>'.$arr['filename'].'</td><td><a href=parse.php?delete='.$arr['filename'].'>Delete</a></td></tr>'."\n";
+}
+echo '</table>'."\n";
+
+echo '<br />'."\n";
+
+echo '<table class="result">'."\n";
+echo '<tr><th colspan="'.(count($scanInfo)+1).'">Results</th></tr>'."\n";
+echo '<tr><th>Port</th>';
+for($i = 0; $i < count($scanInfo); $i++){ echo '<th>'.$i.' ('.$scanInfo[$i]['type'].')</th>';}
+echo '</tr>'."\n";
+foreach($hostAndPort as $host => $portArr)
+{
+  echo '<tr><th colspan="'.(count($scanInfo)+1).'">'.$host.'</th></tr>'."\n";
+
+  foreach($portArr as $portName => $service)
+    {
+      echo '<tr><td>'.$portName.($service != "" ? " (".$service.")" : "").'</td>';
+      foreach($scanInfo as $scanNum => $arr)
+	{
+	  if(isset($results[$scanNum][$host][$portName]))
+	    {
+	      echo '<td>'.(($results[$scanNum][$host][$portName]['state'] == "open" || $results[$scanNum][$host][$portName]['state'] == "closed" || $results[$scanNum][$host][$portName]['state'] == "unfiltered") ? '<span class="lookhere">' : '').$results[$scanNum][$host][$portName]['state'].' ('.$results[$scanNum][$host][$portName]['state_reason'].(isset($results[$scanNum][$host][$portName]['state_reason_ip']) ? ' '.$results[$scanNum][$host][$portName]['state_reason_ip'] : '').')'.(($results[$scanNum][$host][$portName]['state'] == "open" || $results[$scanNum][$host][$portName]['state'] == "closed" || $results[$scanNum][$host][$portName]['state'] == "unfiltered") ? '</span>' : '').'</td>';
+	    }
+	  else
+	    {
+	      echo '<td><em>n/a</em></td>';
+	    }
+	}
+      echo '</tr>'."\n";
+    }
+
+}
+echo '</table>'."\n";
+
+/**
+ * Parse meaningful information from a nmap XML output file and return it as an array
+ *
+ * @return array
+ */
+function handleError($errno, $errstr, $errfile, $errline, array $errcontext)
+{
+    // error was suppressed with the @-operator
+    if (0 === error_reporting()) {
+        return false;
+    }
+
+    throw new ErrorException($errstr, 0, $errno, $errfile, $errline);
+}
+set_error_handler('handleError');
+
+function getScanResults($file)
+{
+ try {
+  $xml = simplexml_load_file($file);
+
+  $result = array("scan" => array(), "hosts" => array());
+
+  $command = $xml->attributes();
+  $command = (string)$command['args'];
+  $result['scan']['command'] = $command;
+
+  $foo = $xml->scaninfo->attributes();
+  $result['scan']['type'] = (string)$foo['type'];
+  $result['scan']['protocol'] = (string)$foo['protocol'];
+  $result['scan']['services'] = (string)$foo['services'];
+
+  $count = 0;
+  foreach($xml->host as $host)
+    {
+      $count++;
+
+      $foo = $host->address->attributes();
+      $addr = (string)$foo['addr'];
+
+      $arr = array(); // array to hold ports and results
+
+      // <port protocol="tcp" portid="445"><state state="filtered" reason="admin-prohibited" reason_ttl="241" reason_ip="67.83.255.41"/><service name="microsoft-ds" method="table" conf="3" /></port>
+      foreach($host->ports->port as $port)
+	{
+	  $foo = $port->attributes();
+	  $bar = array();
+	  
+	  $name = (string)($foo['protocol']." ".$foo['portid']);
+	  $bar['protocol'] = (string)$foo['protocol'];
+	  $bar['portid'] = (string)$foo['portid'];
+	  $bar['name'] = $name;
+
+	  $foo = $port->state->attributes();
+	  $bar['state'] = (string)$foo['state'];
+	  $bar['state_reason'] = (string)$foo['reason'];
+	  $bar['state_reason_ttl'] = (string)$foo['reason_ttl'];
+	  if(isset($foo['reason_ip'])){ $bar['state_reason_ip'] = (string)$foo['reason_ip'];}
+
+	  if($port->service)
+	    {
+	      $foo = $port->service->attributes();
+	      $bar['service'] = (string)$foo['name'];
+	    }
+
+	  $arr[$name] = $bar;
+	}
+      $result['hosts'][$addr] = $arr;
+    }
+
+  $result['scan']['numHosts'] = $count;
+  return $result;
+
+} catch (ErrorException $e) {
+	echo ("fail");
+}
+}
+
+?>
+</body>
+</html>
+\ No newline at end of file
author	Tom Schaefer <tom@tomschaefer.org>	2011-05-27 23:07:11 -0400
committer	Tom Schaefer <tom@tomschaefer.org>	2011-05-27 23:07:11 -0400
commit	0d0402fbfd69a2978d43e7551319ba970a2d77ef (patch)
tree	005f8181ac8c5e7470441a8e4a3a19b0edabda42 /config/strikeback/parse.tmp
parent	51e31652e2c03e4de2c852cefc637bf394df359b (diff)
download	pfsense-packages-0d0402fbfd69a2978d43e7551319ba970a2d77ef.tar.gz pfsense-packages-0d0402fbfd69a2978d43e7551319ba970a2d77ef.tar.bz2 pfsense-packages-0d0402fbfd69a2978d43e7551319ba970a2d77ef.zip