diff options
| -rw-r--r-- | packages/nmap.xml | 60 |
1 files changed, 60 insertions, 0 deletions
diff --git a/packages/nmap.xml b/packages/nmap.xml new file mode 100644 index 00000000..d92cf5c1 --- /dev/null +++ b/packages/nmap.xml @@ -0,0 +1,60 @@ +<?xml version="1.0" encoding="utf-8" ?> +<packagegui> + <name>nmap</name> + <donotsave>true</donotsave> + <preoutput>yes</preoutput> + <savetext>Scan</savetext> + <!-- Menu is where this packages menu will appear --> + <menu> + <name>NMap</name> + <tooltiptext>NMap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), version detection (determine what application/service is runing on a port), and TCP/IP fingerprinting (remote host OS or device identification). It also offers flexible target and port specification, decoy/stealth scanning, SunRPC scanning, and more. Most Unix and Windows platforms are supported in both GUI and command line modes. Several popular handheld devices are also supported, including the Sharp Zaurus and the iPAQ.</tooltiptext> + <section>Diagnostics</section> + </menu> + <!-- Do not save invokes a simple input menu and will not update + the configuration database. --> + <fields> + <field> + <fielddescr>IP or Hostname</fielddescr> + <fieldname>hostname</fieldname> + <description>Enter the IP address or hostname that you would like to scan.</description> + <type>input</type> + </field> + <field> + <fielddescr>-sT</fielddescr> + <fieldname>option</fieldname> + <description>This is the most basic form of TCP scanning. The connect() system call provided by your operating system is used to open a connection to every interesting port on the machine. If the port is listening, connect() will succeed, oth- erwise the port isn't reachable. One strong advantage to this technique is that you don't need any special privileges. Anyuser on most UNIX boxes is free to use this call.</description> + <type>radio</type> + <typehint>TCP connect() scan.</typehint> + </field> + <field> + <fielddescr>-sP</fielddescr> + <fieldname>option</fieldname> + <description> Ping scanning: Sometimes you only want to know which hosts on a network are up. Nmap can do this by sending ICMP echo request packets to every IP address on the networks you specify. Hosts that respond are up. Unfortunately, some sites such as microsoft.com block echo request packets. Thus nmap can also send a TCP ack packet to (by default) port 80. If we get an RST back, that machine is up. A third technique involves sending a SYN packet and waiting for a RST or a SYN/ACK. For non-root users, a connect() method is used.</description> + <type>radio</type> + <typehint>Ping scanning</typehint> + </field> + <field> + <fielddescr>-sU</fielddescr> + <fieldname>option</fieldname> + <description>This method is used to determine which UDP (User Datagram Protocol, RFC 768) ports are open on a host. The tech- nique is to send 0 byte UDP packets to each port on the target machine. If we receive an ICMP port unreachable message, then the port is closed. Otherwise we assume it is open. Unfortunately, firewalls often block the port unreachable messages, causing the port to appear open. Sometimes an ISP will block only a few specific dangerous ports such as 31337 (back orifice) and 139 (Windows NetBIOS), making it look like these vulnerable ports are open. So don't panic immediately. Unfortunately, it isn't always trivial to differentiate between real open UDP ports and these filtered false-positives.</description> + <type>radio</type> + <typehint>UDP Scanning</typehint> + </field> + <field> + <fielddescr>-P0</fielddescr> + <typehint>Do not try to ping hosts at all before scanning them.</typehint> + <fieldname>noping</fieldname> + <description>This allows the scanning of networks that don't allow ICMP echo requests (or responses) through their firewall. microsoft.com is an example of such a network, and thus you should always use -P0 or -PT80 when portscanning microsoft.com. Note tht "ping" in this contect may involve more than the traditional ICMP echo request packet. Nmap supports many such probes, including arbi- trary combinations of TCP, UDP, and ICMP probes. By default, Nmap sends an ICMP echo request and a TCP ACK packet to port 80.</description> + <type>checkbox</type> + </field> + </fields> + <custom_add_php_command> + $nmap_options = ""; + if($_POST['option'] == "-sT: TCP connect() scan.") $nmap_options .= " -sT"; + if($_POST['option'] == "-sP: Ping canning") $nmap_options .= " -sP"; + if($_POST['option'] == "-sU: UDP Scanning") $nmap_options .= " -sU"; + if($_POST['noping']) $nmap_options .= " -P0"; + $nmap_options .= " " . $_POST['hostname']; + system("/usr/local/bin/nmap" . $nmap_options); + </custom_add_php_command> +</packagegui>
\ No newline at end of file |